Canonical URL: https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/

---
description: Integrators that restrict incoming requests by source address must update their access lists, Toast said in a September developer notice.
title: Toast changes network addresses used by gift-card API integrations
image: https://giftcard.news/images/social/v1/toast-changes-network-addresses-used-gift-card-api-integrations-f0e1f3850bdc21a00800aaaf932f6609.jpg
---

1. [Home](https://giftcard.news/)
2. [Payments & Technology](https://giftcard.news/payments-technology/)

# Toast changes network addresses used by gift-card API integrations

Integrators that restrict incoming requests by source address must update their access lists, Toast said in a September developer notice.

By [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) September 18, 2026 2 min read [ Google News ](https://google.com/preferences/source?q=giftcard.news&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) 

Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Toast+changes+network+addresses+used+by+gift-card+API+integrations&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Toast+changes+network+addresses+used+by+gift-card+API+integrations+https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") 

![A customer hands a card to a cashier beside a payment terminal](https://giftcard.news/images/variants/v1/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier-w1280.webp) 

 Illustrative card transaction. The people and business pictured are unrelated to Toast. Photo: SpotOn / Unsplash. Photo: SpotOn / Unsplash 

[Toast](https://giftcard.news/company/toast/) has announced new network addresses for outbound API requests, requiring an access-list update from gift-card integrators that restrict incoming traffic by its source.

The September 18 developer notice [\[S01\]](#article-source-1) explicitly covers gift-card, loyalty and tender APIs, alongside webhook messages. It lists nine production addresses and four sandbox addresses.

The data behind the story 

### Published source-address lists differ by environment

Toast September 18, 2026 notice, matched to the complete developer guide.

 Listed IPv4 source addresses 

Listed IPv4 source addresses

Tap or hover for details. All values are also available in the data table.

Source 

Toast developer guide: source IP addresses

Count of unique addresses in each explicitly published list. Shared across webhook, gift-card, loyalty and tender requests. Not traffic, request volume, capacity, outage counts or a before-and-after expansion. Allowlisting does not replace request authentication.

Show data tableHide data table 

Scroll left or right to see all columns 

__Published source-address lists differ by environment (Listed IPv4 source addresses)__
| Category   | Listed IPv4 source addresses   |
| ---------- | ------------------------------ |
| Production | 9 Listed IPv4 source addresses |
| Sandbox    | 4 Listed IPv4 source addresses |

Toast says integrations must allow every address for the relevant environment to continue receiving requests without interruption. An incomplete list could produce intermittent failures because some requests would arrive from permitted addresses while others would be blocked. The notice does not report an actual outage or affected transaction total.

The company's supporting technical documentation [\[S02\]](#article-source-2) explains that these integrations share the same address list within each environment. There is no dedicated address assigned to an individual integration or request type.

The documentation also distinguishes network access from authentication. Allowing an address through a firewall does not replace verification of webhook signatures or the credentials accompanying outbound API requests.

For gift-card providers connected to restaurant systems, the change concerns the delivery path for platform requests. Toast's announcement does not specify a migration deadline or say that card balances or card terms are changing.

## In this article

### Companies

* [Toast](https://giftcard.news/company/toast/)

### Sources and documents

* [\[S01\] Original primary announcement](https://api-updates.toasttab.com/announcements/new-source-ip-addresses-for-webhook-messages-and-outbound-api-requests?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Toast
* [\[S02\] Primary operating context](https://doc.toasttab.com/doc/devguide/apiSourceIpAddresses.html?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Toast

Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Toast+changes+network+addresses+used+by+gift-card+API+integrations&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Toast+changes+network+addresses+used+by+gift-card+API+integrations+https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") 

![Portrait of Daniel Brooks](https://giftcard.news/images/variants/v1/daniel-brooks-editorial-portrait-w320.webp) 

About the author

## [Daniel Brooks](https://giftcard.news/author/daniel-brooks/)

Journalist — Payments, Security & PCI DSS

Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News.

From reading to building

## Your next move in gift cards.

Tell us what you’re building. We’ll help you explore suitable providers.

[Find a provider ](https://giftcard.news/find-a-provider/) 

## Related articles

[Payments & Technology](https://giftcard.news/payments-technology/) News 

### [PhonePe turns Indus Appstore into a browser-accessible gift-card marketplace](https://giftcard.news/payments-technology/phonepe-appstore-browser-gift-card-marketplace/)

[Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 28, 2026 3 min 

[Payments & Technology](https://giftcard.news/payments-technology/) News 

### [Square builds gift-card scanning into new restaurant kiosk](https://giftcard.news/payments-technology/square-kiosk-built-in-gift-card-scanning-franchise-management/)

[Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 14, 2026 3 min 

[Payments & Technology](https://giftcard.news/payments-technology/) News 

### [Steam Japan wallet report contrasts expiry clause with support response](https://giftcard.news/payments-technology/steam-japan-wallet-expiry-clause-support-clarification-report/)

[Maya Bennett](https://giftcard.news/author/maya-bennett/) October 9, 2026 2 min

```json
{"@context":"https://schema.org","@graph":[{"@type":"NewsMediaOrganization","@id":"https://giftcard.news/#publisher","name":"Gift Card News","url":"https://giftcard.news/","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","logo":{"@type":"ImageObject","url":"https://giftcard.news/icon-512.png","contentUrl":"https://giftcard.news/icon-512.png","width":512,"height":512,"@id":"https://giftcard.news/#logo"},"publishingPrinciples":"https://giftcard.news/editorial-policy/","correctionsPolicy":"https://giftcard.news/editorial-policy/"},{"@type":"WebSite","@id":"https://giftcard.news/#website","url":"https://giftcard.news/","name":"Gift Card News","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","inLanguage":"en","publisher":{"@id":"https://giftcard.news/#publisher"},"potentialAction":{"@type":"SearchAction","target":"https://giftcard.news/search/?q={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"Person","@id":"https://giftcard.news/author/daniel-brooks/#person","name":"Daniel Brooks","url":"https://giftcard.news/author/daniel-brooks/","description":"Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News.","jobTitle":"Journalist — Payments, Security & PCI DSS","image":{"@type":"ImageObject","url":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","contentUrl":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","width":1254,"height":1254,"caption":"Illustrated portrait representing the Daniel Brooks editorial profile.","@id":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp#image","encodingFormat":"image/webp","description":"Illustrated portrait for Daniel Brooks, a Gift Card News editorial pen name","creditText":"Gift Card News / AI-generated illustration"}},{"@type":"ImageObject","url":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp","contentUrl":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp","width":1920,"height":1440,"caption":"Illustrative card transaction. The people and business pictured are unrelated to Toast. Photo: SpotOn / Unsplash.","@id":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp#image","encodingFormat":"image/webp","description":"A customer hands a card to a cashier beside a payment terminal","creditText":"SpotOn / Unsplash","isBasedOn":"https://unsplash.com/photos/customers-interacting-with-a-cashier-and-a-point-of-sale-system-u1DVI-1UUV8"},{"@type":"Dataset","@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#dataset","url":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/","name":"Toast changes network addresses used by gift-card API integrations: figure data","description":"Tabular data for the figures accompanying \"Toast changes network addresses used by gift-card API integrations\". Sources, units and limitations are documented with each figure.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article"},"isAccessibleForFree":false,"hasPart":[{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article-figure-1-dataset"}],"distribution":{"@type":"DataDownload","contentUrl":"https://giftcard.news/download.csv?article=%2Fpayments-technology%2Ftoast-gift-card-api-source-ip-address-change%2F","encodingFormat":"text/csv","isAccessibleForFree":false}},{"@type":"Dataset","@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article-figure-1-dataset","url":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article-figure-1","name":"Published source-address lists differ by environment","description":"Tabular values displayed in the figure \"Published source-address lists differ by environment\" and its accompanying data table.\n\nToast September 18, 2026 notice, matched to the complete developer guide.\n\nCount of unique addresses in each explicitly published list. Shared across webhook, gift-card, loyalty and tender requests. Not traffic, request volume, capacity, outage counts or a before-and-after expansion. Allowlisting does not replace request authentication.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#dataset"},"isAccessibleForFree":true,"variableMeasured":[{"@type":"PropertyValue","name":"Listed IPv4 source addresses","unitText":"Listed IPv4 source addresses"}],"isBasedOn":[{"@type":"CreativeWork","name":"Toast developer guide: source IP addresses","url":"https://doc.toasttab.com/doc/devguide/apiSourceIpAddresses.html"}]},{"@type":"NewsArticle","@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article","url":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/","headline":"Toast changes network addresses used by gift-card API integrations","description":"Integrators that restrict incoming requests by source address must update their access lists, Toast said in a September developer notice.","datePublished":"2026-09-18T00:00:00.000Z","dateModified":"2026-10-18T15:52:28.859Z","inLanguage":"en","mainEntityOfPage":{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#webpage"},"isPartOf":{"@id":"https://giftcard.news/#website"},"isAccessibleForFree":false,"hasPart":[{"@type":"WebPageElement","isAccessibleForFree":false,"cssSelector":".reader-restricted"},{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#dataset"}],"image":[{"@type":"ImageObject","url":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp","contentUrl":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp","width":1920,"height":1440,"caption":"Illustrative card transaction. The people and business pictured are unrelated to Toast. Photo: SpotOn / Unsplash.","@id":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp#image","encodingFormat":"image/webp","description":"A customer hands a card to a cashier beside a payment terminal","creditText":"SpotOn / Unsplash","isBasedOn":"https://unsplash.com/photos/customers-interacting-with-a-cashier-and-a-point-of-sale-system-u1DVI-1UUV8"}],"articleSection":"Payments & Technology","keywords":["Toast"],"mentions":[{"@type":"Organization","@id":"https://giftcard.news/company/toast/#entity","name":"Toast","url":"https://giftcard.news/company/toast/"}],"wordCount":264,"citation":[{"@type":"CreativeWork","name":"[S01] Original primary announcement","url":"https://api-updates.toasttab.com/announcements/new-source-ip-addresses-for-webhook-messages-and-outbound-api-requests","publisher":{"@type":"Organization","name":"Toast"}},{"@type":"CreativeWork","name":"[S02] Primary operating context","url":"https://doc.toasttab.com/doc/devguide/apiSourceIpAddresses.html","publisher":{"@type":"Organization","name":"Toast"}}],"author":[{"@id":"https://giftcard.news/author/daniel-brooks/#person"}],"publisher":{"@id":"https://giftcard.news/#publisher"}},{"@type":"WebPage","@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#webpage","url":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/","name":"Toast changes network addresses used by gift-card API integrations","description":"Integrators that restrict incoming requests by source address must update their access lists, Toast said in a September developer notice.","datePublished":"2026-09-18T00:00:00.000Z","dateModified":"2026-10-18T15:52:28.859Z","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/#website"},"mainEntity":{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#article"},"breadcrumb":{"@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#breadcrumbs"},"primaryImageOfPage":{"@id":"https://giftcard.news/images/toast-changes-network-addresses-used-gift-card-api-integrations-customer-hands-cashier.webp#image"}},{"@type":"BreadcrumbList","@id":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/#breadcrumbs","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://giftcard.news/"},{"@type":"ListItem","position":2,"name":"Payments & Technology","item":"https://giftcard.news/payments-technology/"},{"@type":"ListItem","position":3,"name":"Toast changes network addresses used by gift-card API integrations","item":"https://giftcard.news/payments-technology/toast-gift-card-api-source-ip-address-change/"}]}]}
```