IP whitelisting
Approve the public egress address used by your backend.
Use the outbound public IP
Configure the public IP from which your server reaches ZytePe, not a private network address or a user's browser IP. If your application runs behind NAT or a proxy, confirm the actual egress address with your infrastructure team.
Plan for stable egress
Approve all intended production egress addresses through the merchant setup workflow. Serverless or autoscaling infrastructure may need a stable outbound networking configuration. Do not assume a changing deployment IP remains approved.
Diagnose access failures
The local backend checks active account status and approved source IPs for signed requests. An unauthorized_source_ip error is an access-configuration issue; changing the signature will not approve the server. Contact support with redacted details if the observed address differs from your approved setup.