IP addresses
When Orchestr connects a payment provider to your account, it calls that provider on your behalf, from a fixed set of IP addresses. Many providers only accept API traffic from allowlisted IPs - if yours does, add the Orchestr addresses below to the allowlist in your provider account, or the provider will reject the requests Orchestr sends for you.
Do this once for each provider, after the provider has been added to your account.
Which addresses to allowlist
Orchestr uses a separate, PCI DSS–scoped egress for card acquirers, since those requests carry card data. Allowlist the address that matches both the environment and the kind of provider:
| Environment | Provider type | IP address |
|---|---|---|
| Sandbox | Card acquirers | 63.186.141.35 |
| Sandbox | All other providers | 3.67.25.43 |
| Live | Card acquirers | 18.156.14.115 |
| Live | All other providers | 3.74.193.157 |
- Card acquirers - providers that process card payments (see Card payments). Allowlist the PCI address.
- All other providers - alternative payment methods, bank transfers, wallets, payouts, and so on (see Payment methods). Allowlist the standard address.
If a provider handles both cards and other methods for you, allowlist both addresses for that environment.
Sandbox and live are fully isolated. Allowlist the sandbox addresses in your provider's test account and the live addresses in its production account.
Contact support before changing your provider's network configuration if you are unsure which address applies.