Notabene IPs
If your firewall only lets known addresses through, allow the ones below. Traffic goes both ways: your systems call Notabene, and Notabene calls your webhook endpoint and reads your DID document.
Calls you make to Notabene
Every Notabene host sits behind Cloudflare, so there are no addresses of Notabene’s own to allow. Allow Cloudflare’s published IP ranges for these hosts.
| Host | What it is |
|---|---|
https:/ | The sandbox API. |
| https://eu-a.notabene.id | The production API in the EU. |
| https://us-a.notabene.id | The production API in the US. |
https:/ | Where you request access tokens in sandbox and EU production. |
https:/ | Where you request access tokens in US production. |
| Host | What it is |
|---|---|
https://sandbox.notabene.id | The sandbox API. |
| https://eu-a.notabene.id | The production API in the EU. |
| https://us-a.notabene.id | The production API in the US. |
https://auth.notabene.id | Where you request access tokens in sandbox and EU production. |
https://us.auth.notabene.id | Where you request access tokens in US production. |
Authentication explains which base URL your institution uses.
Calls Notabene makes to you
| What | Addresses |
|---|---|
| Webhooks | Deliveries to your endpoint come from Svix, which sends them for Notabene. Allow the addresses for your region in Svix’s list of source IP addresses: its EU addresses if your institution is in the EU region, its US addresses if it is in the US region. |
| What | Addresses |
|---|---|
| Webhooks | Deliveries to your endpoint come from Svix, which sends them for Notabene. Allow the addresses for your region in Svix’s list of source IP addresses: its EU addresses if your institution is in the EU region, its US addresses if it is in the US region. |
Notabene reads your DID document over HTTPS from these addresses. Counterparty institutions read it too, from their own addresses, so it must stay public.
| Environment | Addresses |
|---|---|
| Sandbox | 3.66.135.96, 54.93.136.118, 63.180.121.185 |
| Production EU | 18.158.240.43, 3.64.123.198, 63.186.82.149 |
| Production EU, failover | 13.38.212.2, 51.44.112.254, 51.44.93.38 |
| Production US | 54.80.122.130, 3.210.111.148, 52.206.63.206 |
| Production US, failover | 44.238.80.86, 50.112.245.144, 32.189.16.98 |
| Environment | Addresses |
|---|---|
| Sandbox | 3.66.135.96, 54.93.136.118, 63.180.121.185 |
| Production EU | 18.158.240.43, 3.64.123.198, 63.186.82.149 |
| Production EU, failover | 13.38.212.2, 51.44.112.254, 51.44.93.38 |
| Production US | 54.80.122.130, 3.210.111.148, 52.206.63.206 |
| Production US, failover | 44.238.80.86, 50.112.245.144, 32.189.16.98 |
You can check that a delivery comes from Notabene whatever its address, as described in Webhooks. For the DID document, Host your DID document explains where it lives on your domain.
Updated 3 days ago
