How stable is ChatGPT’s published egress IP ranges for Apps?

ChatGPT Apps SDK
1

The Apps SDK documentation says - here:

”A frequent question is how your MCP server can confirm that a request actually comes from ChatGPT. Today the only reliable control is network-level filtering, such as allowlisting ChatGPT’s published egress IP ranges.”

However, this list of IPs seems to be ever changing, with just a creation timestamp to show the latest file update. The frequent changes makes allowlisting this egress IPs pointless and breaks the app/connector.

How reliable is this list? How often does it get updated?

What is your proposed solution to keep our MCP server allowlist updated with the changes?

7 Likes
2

Hello team, could we get an answer on this?

This list often goes down (as of the time of writing, I cannot access it), so we need to know whether it’s safe to cache it or not.

3

The list gets updated randomly afaik, so the long-term caching is not helpful

4

from experience with the GPT custom actions which used these ranges, they change every few months. It’s frustrating.