> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qoder.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Addresses

Cloud Agents uses fixed IP address pools for outbound connections made by MCP tool calls. You can use these addresses to configure firewall allowlists so your MCP servers accept traffic from Cloud Agents.

These addresses are dedicated to MCP outbound traffic and are **not** shared with sandbox public-network egress. They will not change without advance notice.

## Outbound IP Addresses (MCP)

These are the stable IP addresses that Cloud Agents uses when an Agent invokes an MCP tool that connects to your external server.

### Global

```
8.216.144.48/28
```

### China (CN)

```
39.102.160.96/28
```

## Firewall Configuration

To allow MCP tool calls from Cloud Agents to reach your server, add the appropriate CIDR block to your inbound firewall rules:

| Your deployment region | CIDR to allowlist  |
| ---------------------- | ------------------ |
| Outside mainland China | `8.216.144.48/28`  |
| Mainland China         | `39.102.160.96/28` |

<Note>
  These IP ranges apply **only** to MCP tool-call egress. Sandbox containers with `unrestricted` or `allowed_hosts` networking use separate, non-overlapping public IP ranges and are not covered here.
</Note>

## FAQ

**Q: Will these IP addresses change?**

A: Not without advance notice. If ranges are added or rotated, we will announce the change with sufficient lead time for you to update firewall rules.

**Q: Do sandbox outbound connections also come from these IPs?**

A: No. Sandbox public-network egress uses a different IP pool. The ranges on this page are exclusively for MCP tool calls made by the platform on behalf of an Agent.

**Q: Do I need to allowlist both ranges?**

A: Only the range matching your Cloud Agents region. If you use the Global endpoint (`api.qoder.com`), allowlist the Global range. If you use the China endpoint, allowlist the CN range.