Skip to main content
Cloud Agents uses fixed IP address pools for outbound connections made by MCP tool calls. You can use these addresses to configure firewall allowlists so your MCP servers accept traffic from Cloud Agents. These addresses are dedicated to MCP outbound traffic and are not shared with sandbox public-network egress. They will not change without advance notice.

​
Outbound IP Addresses (MCP)

These are the stable IP addresses that Cloud Agents uses when an Agent invokes an MCP tool that connects to your external server.

​
Global

8.216.144.48/28

​
China (CN)

39.102.160.96/28

​
Firewall Configuration

To allow MCP tool calls from Cloud Agents to reach your server, add the appropriate CIDR block to your inbound firewall rules:
Your deployment regionCIDR to allowlist
Outside mainland China8.216.144.48/28
Mainland China39.102.160.96/28
These IP ranges apply only to MCP tool-call egress. Sandbox containers with unrestricted or allowed_hosts networking use separate, non-overlapping public IP ranges and are not covered here.

​
FAQ

Q: Will these IP addresses change? A: Not without advance notice. If ranges are added or rotated, we will announce the change with sufficient lead time for you to update firewall rules. Q: Do sandbox outbound connections also come from these IPs? A: No. Sandbox public-network egress uses a different IP pool. The ranges on this page are exclusively for MCP tool calls made by the platform on behalf of an Agent. Q: Do I need to allowlist both ranges? A: Only the range matching your Cloud Agents region. If you use the Global endpoint (api.qoder.com), allowlist the Global range. If you use the China endpoint, allowlist the CN range.