Hi -
I’ve whitelisted OpenAI IPs from chatgpt_connectors.json (linked) but seeing calls from other IPs when I invoke my app inside of ChatGPT with developer mode. These IPs seem to be from Microsoft/Azure but are not in this json file.
Has anyone experienced anything similar? Would appreciate clarification on whether this is a bug or whether I need to add additional whitelisting for certain connector IPs.
Thanks!
Hi,
What you’re seeing is actually expected. The `chatgpt_connectors.json` file only lists IPs directly associated with OpenAI. However, when you run your app inside ChatGPT in developer mode, some requests are routed through Microsoft/Azure infrastructure. That’s why you’re seeing IPs that aren’t in the JSON file.
A practical solution is to expand your whitelist to include Azure IP ranges, or rely on an additional verification mechanism (such as JWT signatures or API keys) instead of IPs alone.
For reference, Microsoft publishes the Azure IP ranges here: Azure IP address prefixes (learn.microsoft.com).
If you’re still unsure, I’d recommend contacting OpenAI support to confirm whether this behavior is expected or a bug.