IP Addresses & API Domain
Notification IP Address
Midtrans sends (outgoing) HTTP notifications / webhook status update from various IP addresses to your notification url (as backend to backend request). In case your system needs to whitelist IP addresses, please add Midtrans CIDR given below to your whitelist.
Production Environment: 126.96.36.199/24 188.8.131.52/32 184.108.40.206/23 220.127.116.11/32 18.104.22.168 22.214.171.124 Sandbox Environment : 126.96.36.199 188.8.131.52
Change Notice for Production Environment per Jan 20th, 2023
As part of improving our service reliability
- New IP addresses are added: 184.108.40.206 and 220.127.116.11
- The older IP ranges with prefixes of 103.x.x.x will gradually no longer be used, a few weeks after.
Although we are providing the IP list, we don’t quite recommend relying on IP whitelisting to ensure notification authenticity. Instead, we strongly recommend you to verify the authenticity by implementing the methods explained here.
If you are unable to receive notification from Midtrans, please ensure that your infrastructure is allowing HTTPs connection from the above-mentioned IP addresses. Additionally try to follow this troubleshooting section.
API Domain Endpoint
Midtrans API endpoint is distributed and protected with multiple layers of security, it does not have any specific IP address. So, please whitelist our API domain names mentioned below.
api.midtrans.com api.sandbox.midtrans.com app.midtrans.com app.sandbbox.midtrans.com
If you are unable to send request to Midtrans, please ensure that you have whitelisted the above-mentioned domain name.
If it is necessary for you to whitelist IP addresses instead of the Domain name, you can refer to the IP range list. Although this is not recommended. Do so at your own risk, as the IP range may change without notice, which poses the risk of breaking your integration.
Updated about 1 month ago