Hi,

We’re currently making a large number of website requests to our Invision Community installation and have noticed that some of our request keys are being flagged or blocked by the system’s security mechanisms (e.g., spam filters, rate limiting, or automatic bans).

Is there a way to whitelist specific API keys, request headers, IP addresses, or any other identifiers to prevent them from being restricted or banned by the platform?

We’d like to ensure that our legitimate requests aren’t being incorrectly identified as malicious, while still maintaining overall site security.

Thanks in advance for any guidance you can provide!

Sincerely,
David

Typically, the API system will automatically ban IP addresses into ACP -> Members -> Ban Settings when there is a high rate of failure. Whether this failure is from incorrect keys or otherwise is something you will need to determine and resolve. This is not something you will want to whitelist to avoid.

Additionally, if you are not seeing the IP address appear in the aforementioned Ban Settings, there is something else on your server banning them.