IP addresses

If your firewall only accepts traffic from known addresses, this page lists the addresses mTime’s integrations connect from — for example when mTime sends absences or salary data to your payroll system, or calls your HR system to sync employees.

What to allow

Allow both of the following for the environment you connect to.

1. mTime’s fixed addresses

We are moving all integration traffic onto these addresses. Allow them now, so nothing breaks when the move is complete.

2. Scaleway’s IP ranges (for now)

mTime runs on Scaleway in France. Some of its traffic — notably the scheduled syncs, which run in the background every night — does not yet come from the fixed addresses above. It comes from an address that can be anywhere in Scaleway’s shared ranges, so until the move is complete you also need to allow:

• Scaleway’s IPv4 ranges, as Scaleway publishes them. Scaleway keeps that list up to date; use it rather than a copy.

Bear in mind that these ranges are shared by every Scaleway customer, so they confirm the traffic comes from Scaleway, not that it comes from mTime. Integrations still authenticate each call with their own credentials, so allowing the ranges doesn’t grant anyone access on its own.

We’ll update this page and announce it in the product updates once the Scaleway ranges are no longer needed.

Changes to these addresses

The addresses are fixed, but we may have to change them — for example to move to new infrastructure or recover from an incident. If that happens, we give a few days’ notice where we can, through the product updates and this page.

Because the notice can be short, build your allowlist so it is quick to update, and don’t treat these addresses as a replacement for authenticating the integration.

Troubleshooting