1. Who needs to provide a Static IP to place API orders?

All API users must provide a static IP in order to place any order through Rupeezy’s trading APIs. This applies to all categories of users—individuals, partners, algos, institutions, and HFT setups.


2. Does Rupeezy support IPv4, IPv6, or both for whitelisting?

Both IPv4 and IPv6 addresses can be whitelisted.


3. How many Static IPs can a client whitelist?

Each client account may whitelist up to two static IPs.


4. How long does IP whitelisting take?

Whitelisting is instant.
As soon as the client enters the static IP(s) in their API settings, the IP becomes active and allowed for trading calls.


5. How do users request whitelisting?

No manual request is needed.
The whitelisting process is automatic and built into the platform. Users simply add their static IP directly inside the Vortex API portal.


6. What happens if an order request comes from a non-whitelisted IP?

The order will be rejected


7. Are read-only APIs also restricted by Static IP?

No.
Read-only endpoints (e.g., holdings, positions, funds, margins, profile, brokerage, etc.) do not require a static IP. Only order placement and other write-type endpoints require one.


8. What is the recommended architecture for using Rupeezy APIs?

Rupeezy strongly recommends calling trading APIs from a backend server that has a static IP—not directly from mobile apps, browser clients, or desktop apps.


Typical flow:

Your Backend Server (Static IP) → Rupeezy Trading API

This ensures:

  • Security

  • Enforcement of SEBI-mandated IP rules

  • Prevention of unauthorized order placement


9. What security standards must API users follow?

All users must follow the security guidelines specified in the Rupeezy API Documentation, including:

  • HTTPS

  • API key + Secret

  • Token authentication

  • Secure credential handling


10. Does Rupeezy block certain IP types such as VPNs or residential IPs?

Rupeezy does not apply any additional blocking beyond the static IP requirement.
However, static IPs must be:

  • Stable

  • Verifiably under client control

  • Not dynamically assigned


11. Is the Static IP requirement mandated by regulators?

Yes.
SEBI mandates that all order placement APIs must be accessible only from static, pre-whitelisted IP addresses to prevent unauthorized trades and ensure traceability.
This is a compliance requirement — not optional.


12. Can the same Static IP be used across multiple accounts?

By default, static IPs cannot be shared across multiple client accounts.
Each client must use their own static IP.


Exception:
If users prove they are part of the same family and provide valid documentation, the same static IP may be allowed across those accounts.