Whitelist
Client IPs on a proxy's whitelist can use the proxy without a username and password (HTTP and SOCKS5). Everyone else still needs a proxy user. See Proxy formats.
Rules: IPv4 ranges must be /16 or narrower, IPv6 /32 or narrower; at most 20 entries per proxy; a single IP is
stored as /32 (IPv4) or /128 (IPv6). Changes reach the proxy with the node's next config pull (seconds).
List
GET /proxies/{id}/whitelistAbility: read
Response 200
Add
POST /proxies/{id}/whitelistAbility: manage · Who: anyone on the account except team viewers; sub-users for their assigned proxies.
Response 201
422 validation_failed (fields.cidr) for an invalid or too-wide range, a duplicate, or a full list.
Remove
DELETE /proxies/{id}/whitelist/{entryId}Ability: manage
Response 204 (no body) · 404 not_found if the entry is not on this proxy.