SETSimple Easy Transactions
SET DocsAPI reference and complianceUpdated 2026-11-10
Browse: SET Direct Deposit API

SET Direct Deposit API · Keys

Pin your key to your servers' addresses

POST/api/partner/keys/allowed_cidrs

Key scope: partner key

Sets the addresses your partner key may be used from: up to 20 IPv4 or IPv6 addresses or CIDR ranges, or [] for any address. A request with the key from anywhere else is refused with 403 ip_not_allowed. Event key.allowed_cidrs_changed.

Body

allowedCidrs string[]required
The full list; it replaces the one before.

Notes

  • Only the current partner key, or an admin on the partner dashboard, can change the list. A SET API key with the direct_deposit scope gets 403 partner_key_required; the previous key during an overlap gets 409 key_not_current.
  • The current key cannot shut itself out: a list that leaves out the address you are calling from is 409 would_lock_out. See Pinning a key to your servers.

Errors

  • 400 body_invalid
  • 400 cidrs_invalid
  • 403 partner_key_required
  • 409 key_not_current
  • 409 would_lock_out
  • 401 partner_key_required
  • 401 partner_key_invalid
  • 403 ip_not_allowed
  • 429 rate_limited
  • 503 direct_deposit_disabled

All codes: Errors.