---
title: >-
  App IP allowlists now support apps with serverless hosting through ASNs -
  Shopify developer changelog
description: >-
  Shopify’s developer changelog documents all changes to Shopify’s platform.
  Find the latest news and learn about new platform opportunities.
source_url:
  html: >-
    https://shopify.dev/changelog/posts/app-ip-allowlists-now-support-apps-with-serverless-hosting
  md: >-
    https://shopify.dev/changelog/posts/app-ip-allowlists-now-support-apps-with-serverless-hosting.md
metadata:
  effectiveApiVersion: ''
  affectedApi: []
  primaryTag:
    displayName: Dev Dashboard
    handle: dev-dashboard
  secondaryTag:
    displayName: New
    handle: new
  indicatesActionRequired: false
  createdAt: '2026-11-03T22:07:32-05:00'
  postedAt: '2026-11-05T10:59:00-05:00'
  updatedAt: '2026-11-05T09:49:00-05:00'
  effectiveAt: '2026-11-04T13:00:00-05:00'
---

November 5, 2026

# App IP allowlists now support apps with serverless hosting through ASNs

DateNovember 5, 2026

FlagsNew

Tags[Security](https://shopify.dev/changelog?filter=security)Dev Dashboard

Apps without static IP addresses, such as apps on serverless platforms, can now add your hosting provider's autonomous system numbers (ASNs) to your app's [IP allowlist in the Dev Dashboard](https://shopify.dev/changelog/posts/restrict-admin-api-access-to-your-app-with-an-ip-allowlist).

## What changed

The **IP allowlist** section of your app's **Settings** page now lets you allow either **IP addresses** or **Networks (ASN)**. For networks, enter up to 10 ASNs and limit them to up to 10 countries. Test them against recent traffic, then turn on enforcement. Requests from outside your allowed networks fail with a `403` status code.

## What to do

IP allowlists will [soon be required](TODO) for all public apps. Shopify strongly recommends all apps use an IP allowlist.

If your app calls Shopify from static IP addresses, keep allowing those addresses. If your app's egress IP addresses are dynamic, allow your hosting provider's ASNs and list the countries your app runs in.

For setup instructions, see [Restrict API access with an IP allowlist](https://shopify.dev/docs/apps/build/dev-dashboard/ip-allowlist).