IP Addresses & API Domain

Notification IP Address

Midtrans sends (outgoing) HTTP notifications / webhook status update from various IP addresses to your notification url (as backend to backend request). In case your system needs to whitelist IP addresses, please add Midtrans CIDR given below to your whitelist.

Production Environment:

Sandbox Environment :


Change Notice for Production Environment per Jan 20th, 2023

As part of improving our service reliability

  • New IP addresses are added: and
  • The older IP ranges with prefixes of 103.x.x.x will gradually no longer be used, a few weeks after.

Although we are providing the IP list, we don’t quite recommend relying on IP whitelisting to ensure notification authenticity. Instead, we strongly recommend you to verify the authenticity by implementing the methods explained here.


If you are unable to receive notification from Midtrans, please ensure that your infrastructure is allowing HTTPs connection from the above-mentioned IP addresses. Additionally try to follow this troubleshooting section.

API Domain Endpoint

Midtrans API endpoint is distributed and protected with multiple layers of security, it does not have any specific IP address. So, please whitelist our API domain names mentioned below.




If you are unable to send request to Midtrans, please ensure that you have whitelisted the above-mentioned domain name.

If it is necessary for you to whitelist IP addresses instead of the Domain name, you can refer to the IP range list. Although this is not recommended. Do so at your own risk, as the IP range may change without notice, which poses the risk of breaking your integration.