Which IP do I whitelist — my laptop's IP or my webhook provider's IP?

Whitelist the IP that actually sends the order to the broker. If you use a webhook or bridge service like TradeSteady, that is the service's static IP, not your laptop's home IP. Whitelisting your home IP will fail because it is dynamic and is not where the order originates.

Step-by-Step Broker Setup 2026

How to Whitelist Your Static IP with Indian Brokers: Step-by-Step for Zerodha, Dhan, Fyers, Angel One & More

Got an "IP not whitelisted" or 403 Forbidden error placing API orders? This is the complete, broker-by-broker reference for adding your static IP to every major Indian broker's developer portal — with exact menu paths, IP limits, and fixes for the errors that trip people up.

TradeSteady Algo

Published: June 12, 2026 11 min read

Since SEBI made static IP whitelisting mandatory for all broker API trading, the single most common support question we get is: "I have my static IP — now where exactly do I paste it?" Every broker hides the setting in a slightly different place, and one wrong field means your orders silently fail.

This guide gives you the exact path for each broker. Jump straight to yours:

Zerodha Dhan Fyers Angel One Upstox Groww 5paisa / IIFL Kotak / ICICI

Before You Start: 3 Things to Check

Whitelisting takes about two minutes per broker once you have these ready:

Your exact static IP address. Copy it from your provider dashboard. If you use TradeSteady, your static IP is shown on your dashboard alongside your proxy credentials. It looks like 103.214.56.78 — no http://, no port, no spaces.
An active API / developer app. You need a created app on your broker's developer portal (the one that issues your API key and secret). The IP whitelist is a per-app setting.
Login access to the developer portal. This is usually a separate login from your normal trading app — the developer/API console, not Kite/Dhan web.

The #1 reason whitelisting "doesn't work": people whitelist their home broadband IP. Home IPs are dynamic — they change on every router restart or ISP lease refresh, which silently breaks the whitelist within days. Always whitelist a static IP. If you don't have one yet, that's the real first step.

Which IP Do You Actually Whitelist?

This trips up almost everyone. The rule is simple: whitelist the IP that the order request leaves from — not necessarily your laptop.

Your Setup	IP to Whitelist
You use a webhook / bridge service (TradeSteady, etc.)	The service's static IP — that's where the API call to your broker originates
You run a custom Python / Node / Java script on a cloud server	The server's static / Elastic IP
You run your script at home through a static-IP proxy	The proxy's static IP, not your home IP
You run your script directly on home broadband	Your home IP — but it's dynamic and will break. Use a static IP instead.

Not sure what your outgoing IP is? From the machine (or proxy) that places your orders, run curl https://api.ipify.org — whatever it returns is the IP your broker will see. If you use TradeSteady's static IP, that value matches the IP shown on your dashboard.

IP Whitelist Limits by Broker (Quick Reference)

Most brokers cap how many IPs you can whitelist per app. With a dedicated static IP you only ever need one entry, but it's worth knowing the limits:

Broker	API Product	Max IPs	Effective
Zerodha	Kite Connect	1 per app	On next login / token refresh
Dhan	DhanHQ API	Up to 5	Immediate
Fyers	Fyers API v3	Up to 5	Immediate
Angel One	SmartAPI	Up to 5	Immediate
Upstox	Upstox API	Up to 3	Immediate
Groww	Groww API	Up to 3	Immediate
5paisa	5paisa API	Up to 3	Immediate
IIFL Securities	IIFL API	Up to 5	Immediate
Kotak (Neo)	Neo API	Up to 3	Immediate
ICICI Direct	Breeze API	Up to 3	Immediate

Limits as of June 2026. Brokers update their developer portals frequently — always confirm on the official portal.

Zerodha (Kite Connect) — Whitelist Your IP

Log in to the Kite Connect developer portal at developers.kite.trade with your Kite credentials.
Open your app under My Apps → select the app you trade through.
Go to App Settings and find the IP / Postback section.
Paste your static IP into the IP field and Save.
Re-login / regenerate your access token, then send a test order to confirm it's accepted.

Zerodha gotcha: Kite Connect allows only 1 IP per app, and the change usually takes effect on your next login or token regeneration — not instantly. If orders still 403 right after saving, generate a fresh access token before retrying.

Dhan — Whitelist Your IP

Log in to the Dhan developer portal and open DhanHQ Trading APIs.
Open your API app settings.
Find the Whitelisted IPs section.
Add your static IP (you can add up to 5) and Save.
Place a test order — Dhan applies the whitelist immediately.

Fyers — Whitelist Your IP

Log in to the Fyers API Dashboard (myapi.fyers.in).
Select your app from your created apps.
Navigate to IP Whitelist in the app configuration.
Add your static IP (up to 5) and Save changes.
Send a test order to confirm acceptance.

Angel One (SmartAPI) — Whitelist Your IP

Log in to the SmartAPI portal at smartapi.angelone.in.
Open My Apps and select your app.
Go to IP Settings / Whitelist.
Add your static IP (up to 5 allowed) and Submit.
Test an order — the whitelist applies right away.

Upstox — Whitelist Your IP

Log in to the Upstox Developer Console.
Select your app.
Open the IP Whitelist section.
Add your static IP (up to 3) and Save.
Verify with a test order.

Groww — Whitelist Your IP

Log in to the Groww developer portal and open your API app.
Open IP Settings / Whitelisted IPs.
Add your static IP (up to 3) and Save.
Place a test order to confirm.

5paisa, IIFL, Kotak Neo, ICICI Direct & Others

The flow is the same everywhere: developer portal → your app → IP whitelist field → paste → save. Specifics:

5paisa

5paisa Developer Portal → App Settings → add your static IP (up to 3).

IIFL Securities

IIFL API Portal → App Configuration → IP whitelist (up to 5).

Kotak Securities (Neo)

Kotak Neo Developer Portal → your app → IP Settings (up to 3).

ICICI Direct (Breeze)

ICICI Direct API / Breeze portal → App Settings → IP whitelist (up to 3).

HDFC Securities, Motilal Oswal, Alice Blue, Flattrade, Finvasia (Shoonya)

Each exposes an IP-whitelisting field in its API portal. If you can't locate it, contact the broker's API support team — they will point you to the exact section or add the IP for you.

One IP, every broker: a single dedicated static IP can be whitelisted across Zerodha, Dhan, Fyers, Angel One and all the rest at the same time. You don't need a separate IP per broker.

Common Errors & How to Fix Them

Error You See	What It Means	Fix
`IP not whitelisted` / `403 Forbidden`	The order came from an IP not in your whitelist	Confirm your actual outgoing IP, add that exact IP to the broker app, save
Worked yesterday, fails today	Your IP changed (dynamic home IP)	Switch to a static IP so the whitelist stays valid permanently
Saved the IP on Zerodha, still 403	Token issued before the whitelist update	Regenerate the Kite Connect access token, then retry
Whitelisted home IP, still fails	Orders originate from your webhook/proxy, not your laptop	Whitelist the service/proxy static IP instead
Intermittent failures	VPN or shared IP rotating between addresses	Stop using a VPN; use a single dedicated static IP

The One-Line Summary

Whitelist the exact static IP your orders leave from, in your broker's API app settings, and keep it static so it never silently breaks. One dedicated IP covers every Indian broker.

Don't Have a Static IP Yet?

Dedicated Indian residential IP — ₹499/month, or ₹4,499/year on the limited-time yearly plan (save ~25%, ends 31 Jul 2026) • Same IP on renewal
Whitelist it once with Zerodha, Dhan, Fyers, Angel One, Upstox, Groww & every Indian broker.

Get Your Static IP — ₹4,499/year or ₹499/month

Stuck on whitelisting? Chat with us on WhatsApp

Frequently Asked Questions

What does "IP not whitelisted" mean when placing an order?

Your broker's API rejected the order because it came from an IP that isn't registered in your app's whitelist. Add the exact static IP your orders originate from to the broker's IP whitelist section, then retry.

Which IP do I whitelist — my laptop or my webhook provider's IP?

Whitelist the IP that actually sends the order to the broker. If you use a webhook/bridge service like TradeSteady, that's the service's static IP, not your laptop's. Whitelisting a dynamic home IP will fail.

How long does IP whitelisting take to become active?

For most brokers it's effective immediately or within a few minutes of saving. Zerodha Kite Connect typically requires you to regenerate the access token or wait for the next login session.

Can I whitelist more than one IP per broker?

It depends. Zerodha allows only 1 IP per app; Dhan, Fyers and Angel One allow up to 5; Upstox, Groww, 5paisa, Kotak Neo and ICICI Direct typically allow around 3. With a static IP, one entry keeps working indefinitely.

My orders worked yesterday but fail today with a 403. Why?

Your IP most likely changed. Home broadband uses dynamic IPs that change on router restarts or ISP lease refreshes, which silently breaks your whitelist. A dedicated static IP never changes, so the whitelist stays valid.

Do I need a separate IP for each broker?

No. A single dedicated static IP can be whitelisted across all your brokers at once. One IP is enough for Zerodha, Dhan, Fyers, Angel One and every other Indian broker account you run.

Disclaimer · Terms · Privacy · FAQ