To place orders through Rupeezy's trading APIs, you must send them from a static IP address that you've whitelisted — SEBI requires it for every API user. You add the IP yourself on your API key in the Vortex API portal. Each API key takes a Primary static IP and an optional Secondary one (IPv4 or IPv6), and whitelisting is instant unless the IP is already mapped to another account.
Who needs to provide a static IP?
All API users must provide a static IP to place any order through Rupeezy's trading APIs. This applies to every category of user — individuals, partners, algos, institutions and HFT setups.
How do I whitelist my static IP?
No manual request is needed. Whitelisting is automatic and built into the platform: you add your static IP directly in the Vortex API portal, on your API key. Rupeezy accepts both IPv4 and IPv6 addresses, so you can enter whichever your server uses. For the step-by-step flow, see How do I register for the Trading API (Vortex) and generate API keys?
How long does whitelisting take?
Whitelisting is instant. As soon as you enter the static IP in your API settings, it becomes active and allowed for trading calls.
The one exception is an IP that's already mapped to another Rupeezy account. In that case, you need to submit a family declaration, and the IP becomes active once it's approved.
How many static IPs can I whitelist?
Each API key has a Primary static IP and an optional Secondary static IP, which you can use as a backup connection. Both IPv4 and IPv6 addresses can be whitelisted.
Can I change my static IP later?
Once mapped, an IP can't be changed for 15 days, so double-check it before saving.
What happens if an order comes from a non-whitelisted IP?
The order is rejected.
Are read-only APIs also restricted by static IP?
No. Read-only endpoints — such as holdings, positions, funds, margins, profile and brokerage — don't need a static IP. Only order placement and other write-type endpoints do.
Can I use the same static IP across multiple accounts?
Not by default — each client must use their own static IP. Exception: if the accounts belong to the same family, you can submit a family declaration. Once it's approved, the same static IP can be used across those accounts.
Does Rupeezy block VPNs or residential IPs?
Rupeezy doesn't apply any blocking beyond the static IP requirement. Your static IP must, however, be:
- Stable
- Verifiably under your control
- Not dynamically assigned
What setup does Rupeezy recommend?
Rupeezy strongly recommends calling the trading APIs from a backend server that has a static IP — not directly from mobile apps, browser clients or desktop apps:
Your backend server (static IP) → Rupeezy Trading API
This setup gives you:
- Security
- Enforcement of SEBI-mandated IP rules
- Protection against unauthorised order placement
What security standards must I follow?
Follow the security guidelines in the Rupeezy API documentation, including:
- HTTPS
- API key + Secret
- Token authentication
- Secure credential handling
Is the static IP requirement mandated by regulators?
Yes. SEBI mandates that all order-placement APIs are accessible only from static, pre-whitelisted IP addresses, to prevent unauthorised trades and ensure traceability. It's a compliance requirement, not an option. SEBI also sets rate rules for automated orders — see How does the Algo ID work in API trading?