Manage API security settings for integrations

Summary

Learn how to manage API security in Box+Dice by enabling or restricting endpoints and applying IP address controls to ensure only trusted systems can access your data.

This article covers:

• About API security
• Use endpoint controls to manage data access
  • Why use endpoint restrictions
• Restrict API access by IP address
  • Why use IP restrictions

About API security

API security features help protect your Box+Dice data when connecting to external integration partners. These controls ensure that systems can only access the information you specifically allow and only from approved locations.

Use endpoint controls to manage data access

Endpoint controls allow you to choose which objects and data types a third party can read or update through the API.

Why use endpoint restrictions

Not all integrations need full access to your data. By enabling only the endpoints required for a system to do its job, you reduce your exposure and strengthen your security posture.

To enable or disable API endpoints:

• Go to: Settings > Integrations
• Select the API tile for the integration you are configuring
• Click the Enable endpoints tab
• Tick the endpoints you want the integration partner to access
• Untick endpoints that should not be available to the third party

Example scenario: 
If a website host needs to receive listing data but will not be sending web enquiries back into Box+Dice, you can disable Contact‑related endpoints. This limits the integration to listings only.

Restrict API access by IP address

IP address restriction allows you to control where API requests are allowed to come from.

Why use IP restrictions

Limiting API access to specific IP addresses prevents unauthorised locations or users from connecting. This is especially useful when partners run their integrations from secure servers or known networks.

To apply IP address restrictions:

• Go to: Settings > Integrations
• Select the API tile
• Click the IP address restriction tab
• Tick to enable IP Address restriction
• Click +Add

• Enter the IP address or IP range provided by your integration partner
• Click Save to restrict API access to only those locations

If anyone attempts to connect from a different IP address, their request will be blocked.