How stable is ChatGPT’s published egress IP ranges for Apps?

The Apps SDK documentation says - here:

”A frequent question is how your MCP server can confirm that a request actually comes from ChatGPT. Today the only reliable control is network-level filtering, such as allowlisting ChatGPT’s published egress IP ranges.”

However, this list of IPs seems to be ever changing, with just a creation timestamp to show the latest file update. The frequent changes makes allowlisting this egress IPs pointless and breaks the app/connector.

How reliable is this list? How often does it get updated?

What is your proposed solution to keep our MCP server allowlist updated with the changes?

4 Likes