# `Ory.Model.IpRestriction`

IPRestriction defines IP-based access controls for an API key. When allowed_cidrs is non-empty, only requests from IPs matching at least one CIDR range are permitted. Empty allowed_cidrs means no IP restriction (all IPs allowed). IP restrictions apply to root API key and imported key verification only; derived tokens (JWT/macaroon) are stateless and not subject to IP checks.

# `t`

```elixir
@type t() :: %Ory.Model.IpRestriction{allowed_cidrs: [String.t()] | nil}
```

# `decode`

---

*Consult [api-reference.md](api-reference.md) for complete listing*