Whitelisting Active Campaign public IPs for bulk import webhook

Hello,

I am using the bulk import contacts endpoint.

I can provide a callback url (Webhook) in the URL
Our organization has a security policy of whitelisting incoming requests from any partner/SaaS.

I would like to whitelist Active Campaign’s public IPs. Do you provide that official list somewhere?

I am aware I could pass some secret-api-key along with the callback url, but whitelisting is a very secured and standard practice for B2B communications.

For security and flexibility, we can’t share or guarantee specific IPs for our services. The recommended approach here would be to append a static token to the webhook URL that we can pass to your server as an authentication mechanism to allowed through your firewall.

1 Like