IP whitelist

An exchange setting that only accepts API requests from approved IP addresses, blocking use of a leaked key from anywhere else. For example, you can restrict a key to the platform's server IP. It adds a second barrier beyond a trade-only scope.