IP Whitelist Feature FAQs

What is an IP Whitelist?

An IP Whitelist is a security measure that grants access only to a pre-approved list of IP addresses. Think of it like a VIP guest list for your online resources – if your IP address isn't on the list, you're denied entry.

Why should I use the IP Whitelist feature?

If you are a new merchant integrating with Paramount's Interac solution, IP whitelisting is mandatory. Your development team must whitelist their IP addresses in order to securely access the Interac Payments APIs on MINT for integration and testing. Similarly, if you're an existing merchant who requires ongoing access to the MINT APIs for development and testing purposes, you will also need to whitelist your development team's IPs.

What IP addresses are supported?

Only private IPv4 addresses with the following formats are supported:

1. Standard IPv4 format (eg. 192.0.2.1)
2. IPv4 with /24 CIDR notation (for eg. 192.0.2.0/24)

Do I need to whitelist IP addresses to access the Interac Payments APIs on Production?

No, whitelisting IPs for Production access to the Interac Payments APIs is not required.

Is there a limit to the number of IP addresses I can whitelist?

There is currently no limit to the number of IP addresses a merchant can whitelist.

Can I whitelist a range of IP addresses?

Yes, you can whitelist an IP range using CIDR notation (eg. 192.168.1.0/24).

Does the IP Whitelist feature support dynamic IPs?

If your IP address changes periodically, you'll need to update the whitelist with the new IP whenever it changes. Alternatively, you can define a range of IP addresses to be whitelisted and configure your dynamic IPs to be within that defined range.

How long does an IP address remain whitelisted?

By default, an IP address remains whitelisted for 180 days. After 180 days, the IP address is automatically removed from your list of whitelisted IPs. To re-activate them, you simply need to re-add the IP address.

What IP addresses are not supported?

The following types of IP addresses are not supported:

1. Private network ranges
   • 10.xx.xx.xx
   • 172.16.xx.xx through 172.31.xx.xx
   • 192.168.xx.xx
2. Loopback addresses
   • 127.x.x.x
   • ::1 (IPv6 loopback)
3. Reserved / special ranges
   • 0.x.x.x
   • 169.254.x.x (link-local)
   • 224.0.0.0 and above (multicast, reserved)
4. Broadcast addresses (ending in .255)