Add Static Outbound IP Addresses

warning: Enabling this feature can result in slower workspace startup times, because workspaces with static IPs are configured with custom network routing.

Agentforce Vibes IDE workspaces can route outbound traffic through a fixed set of static IP addresses. IP allowlisting is an opt-in feature that Salesforce needs to enable for your organization. When active, all outbound traffic from newly created workspaces exits through these IPs.

important: If your organization enforces IP-based access restrictions, such as login IP ranges, add these IPs to your allowlist.

Shared Outbound IP Considerations

All Agentforce Vibes IDE workspaces share the static outbound IP addresses and don’t uniquely identify a specific customer, organization, or workspace.

Global IP Sharing: Adding these addresses to an allowlist permits network-level connection requests from all Agentforce Vibes IDE workspaces, including those outside your organization.
App-Level Protection Required: IP allowlisting controls network connectivity only—it doesn’t grant data access. Continue to protect your endpoints with appropriate app-level authentication and valid Salesforce authorization checks.

Add IP Ranges for an Org

Before you add other IPs, you must first add the outbound IP of your IDE. Use curl ifconfig.me to retrieve the local IP and add it to the allowlist, as explained in these steps.

You can add an IP range for a user profile by:

Using the setup option.
Editing the .profile-meta.xml file for a profile.

Use the Setup Option

Click .
In the Quick Find box, enter Agentforce Vibes IDE.
Verify that the Enable Static IPs option is enabled.
In the Quick Find box, enter Profiles, and select Profiles under Users.
From the list of user profiles, select an Agentforce-Vibe-IDE-user profile. For example, System Administrator.
Scroll down to the Login IP Ranges option and click New.
To add an IP range, enter the same IP address in the Start IP Address and End IP Address boxes.
Enter a description. For example, AFV IDE Static IP Address.
Save your changes. To add more IP addresses, repeat the process.

Edit the `.profile-meta.xml` File

You can manage login IP ranges as profile metadata, which is useful for automation or for CI (Continuous Integration) and CD (Continuous Deployment) pipelines. Add these IP ranges to your .profile-meta.xml file as given in this example.

<Profile xmlns="http://soap.sforce.com/2006/04/metadata">
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>3.97.47.150</startAddress>
        <endAddress>3.97.47.150</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>3.96.231.152</startAddress>
        <endAddress>3.96.231.152</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>63.176.81.41</startAddress>
        <endAddress>63.176.81.41</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>35.156.227.229</startAddress>
        <endAddress>35.156.227.229</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>52.214.167.100</startAddress>
        <endAddress>52.214.167.100</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>34.255.93.118</startAddress>
        <endAddress>34.255.93.118</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>35.173.46.159</startAddress>
        <endAddress>35.173.46.159</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>98.85.15.64</startAddress>
        <endAddress>98.85.15.64</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>44.255.127.30</startAddress>
        <endAddress>44.255.127.30</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>32.184.174.148</startAddress>
        <endAddress>32.184.174.148</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>15.157.244.168</startAddress>
        <endAddress>15.157.244.168</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>35.183.200.37</startAddress>
        <endAddress>35.183.200.37</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>3.66.124.229</startAddress>
        <endAddress>3.66.124.229</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>3.120.64.58</startAddress>
        <endAddress>3.120.64.58</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>63.35.124.169</startAddress>
        <endAddress>63.35.124.169</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>52.214.96.158</startAddress>
        <endAddress>52.214.96.158</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>18.213.38.17</startAddress>
        <endAddress>18.213.38.17</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>3.217.1.37</startAddress>
        <endAddress>3.217.1.37</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>44.232.109.242</startAddress>
        <endAddress>44.232.109.242</endAddress>
    </loginIpRanges>
    <loginIpRanges>
        <description>AFV IDE Static IP Address</description>
        <startAddress>54.190.205.95</startAddress>
        <endAddress>54.190.205.95</endAddress>
    </loginIpRanges>
</Profile>

After you're done updating the IP ranges, Deploy the metadata to Your org by using the sf project deploy start command.

Frequently Asked Questions

Will the List of IPs Change, and How Do I Know When They Do?

The list of IPs doesn't undergo frequent changes. In the event of a planned change, customers are notified before any changes.

Do I Add All the IPs?

Yes. While your workspace currently uses a single IP, we can reassign it to any IP on our list at any time for maintenance or capacity. We recommend allowlisting the entire IP list rather than just your current one to avoid the risk of an immediate, unannounced loss of connectivity.

Does the IP List Replace Other Security Controls?

IP allowlisting provides an extra layer of defense, but Salesforce still fully enforces all standard authentication methods. The standard authentication methods include usernames, passwords, MFA (multi-factor authentication), and Single Sign-On (SSO), alongside authorization controls like profiles, permission sets, and sharing rules.

Can I Restrict Access to My Organization's Workspaces Alone?

IP allowlisting alone isn't enough because multiple organizations share those IPs. Instead, Salesforce authentication secures your data by making sure that only authorized users can log in, no matter where they connect from.