Network Allowlist

curl -fsSL https://backend.autosana.ai/api/v1/network/allowlist \
  -H "X-API-Key: YOUR_API_KEY"

{
  "hook_runners": ["<ip>"],
  "flow_runners": {
    "ios":     ["<ip>", "..."],
    "android": ["<ip>", "..."],
    "web":     ["<ip>", "..."],
    "virtual_runners": {
      "ios_simulators":    ["<ip>", "..."],
      "android_emulators": ["<ip>", "..."],
      "web_browsers":      ["<ip>", "..."]
    },
    "real_device_runners": ["<cidr>", "..."]
  },
  "documentation_url": "https://docs.autosana.ai/network-allowlist"
}

• hook_runners — source IPs for HTTP traffic from hook scripts. Stable; rarely changes. Allowlist on firewalls protecting APIs your hooks call.
• flow_runners.virtual_runners — source IPs for iOS simulators, Android emulators, and web browsers hosted by Autosana.
• flow_runners.real_device_runners — shared source CIDRs for iOS and Android real devices. Allowlist these ranges when running on real devices.

​

Staying in sync

1. Poll from firewall-as-code (Terraform, Cloudflare Worker, CI cron). The endpoint sends Cache-Control: max-age=300, so daily polling is cheap.
2. Manual refresh. Pull once a month, paste into your firewall.