Skip to main content

IP Whitelisting

Summary​

To ensure reliable and secure execution of ThreoBuilder agent workflows, outbound traffic originates from a fixed set of Synthreo-managed IP addresses. If your environment or third-party platforms enforce IP-based access controls, these IPs must be allowlisted.

IP Addresses to Whitelist​

Please allowlist the following outbound IP addresses:

threobuilder_agent_ips:
  - 87.236.195.76/32
  - 87.236.195.199/32
  - 87.236.195.230/32
  - 87.236.197.17/32
  - 87.236.197.172/32
  - 87.236.197.202/32

Each /32 entry represents a single, fixed IP address.

Overview​

ThreoBuilder runs agent-based workflows that execute actions on behalf of your organization. These agents operate from Synthreo-managed infrastructure and initiate outbound connections using a fixed and controlled set of IP addresses.

Many platforms and security controls require both valid authentication credentials and approved source IP addresses. In these environments, credentials alone are not sufficient to allow API access or webhook communication.

Why IP Whitelisting Is Required​

1. IP-Based API Access Controls​

Many platforms, particularly those commonly used by MSPs (such as PSA, RMM, and security tools), restrict API access based on source IP.

Even with:

  • Valid API keys
  • Correct user permissions
  • Proper roles or scopes

Requests may be blocked if they originate from an unapproved IP address.

Without IP whitelisting, ThreoBuilder agent requests may result in:

  • 401 Unauthorized
  • 403 Forbidden
  • Blocked or dropped API calls
  • Intermittent or unreliable connectivity

2. Firewalls and Network Security Policies​

Organizations commonly enforce security controls such as:

  • Network firewalls
  • Web Application Firewalls (WAF)
  • Security gateways or zero-trust policies

Since ThreoBuilder agents run outside your internal network, their outbound IP addresses must be explicitly allowlisted to pass these controls.

3. Reliable Automation and Agent Execution​

ThreoBuilder agents are designed to:

  • Run scheduled automations
  • Trigger and receive webhooks
  • Execute chained or long-running workflows
  • Consistently call external APIs

IP whitelisting ensures:

  • Stable and predictable connectivity
  • Reduced automation failures
  • Reliable execution of production workflows

When IP Whitelisting Is Needed​

IP whitelisting is typically required when:

  • ThreoBuilder calls third-party APIs
  • Webhooks are sent or received
  • Integrating with platforms that enforce IP restrictions
  • Operating in environments with strict firewall or security policies

Additional Notes​

  • These IP addresses apply to outbound traffic initiated by ThreoBuilder agents only.
  • No inbound firewall rules are required.
  • The listed IPs are dedicated to ThreoBuilder agent traffic and are managed exclusively by Synthreo.

If you are unsure whether IP whitelisting is required for your integration, please consult your IT or security team.