Braintree IP Addresses
An allowlist provides access to specified domains and IP addresses when your security policy would otherwise prevent that access. On top of the guarantees that SSL makes, allowlisting Braintree IP addresses further ensures that requests from your server are indeed going to a trusted Braintree server.
Allowlisting can be useful, but it comes with additional overhead and complication. If you do not properly allowlist the Braintree domain names and IP addresses, you may be unable to process payments.
You can download our list of Braintree IP addresses at ips.json.
Braintree production domains
Braintree production fully qualified domain names are:
- text
api.braintreegateway.com
www.braintreegateway.com
gstatic.braintreegateway.com
payments.braintree-api.com
Braintree production IP addresses
Braintree production domain names may resolve to any of the production IP ranges and addresses. If you use a firewall, you must allowlist these to ensure secure and uninterrupted communication with Braintree.
Braintree sandbox domains
Braintree sandbox fully qualified domain names are:
- text
api.sandbox.braintreegateway.com
sandbox.braintreegateway.com
gstatic.sandbox.braintreegateway.com
payments.sandbox.braintree-api.com
Braintree sandbox IP addresses
Braintree sandbox domain names may resolve to any of the sandbox IP ranges and addresses. If you use a firewall, you must allowlist these to ensure secure and uninterrupted communication with Braintree.