IP Authorization

IP Authorization (IP Whitelisting) allows you to authorize trusted IP addresses to connect to MrScraper Residential Proxy without providing proxy credentials (username:password) for every request.

When your server or network IP address is added to the authorized list, MrScraper automatically recognizes incoming traffic from that IP and validates access.

Why Use IP Authorization?

While standard proxy authentication relies on credentials embedded within each request URL, IP Authorization authenticates connections at the network layer based on your source IP.

Comparison: Credential Auth vs. IP Authorization

1. Finding Your Public IP Address

Before configuring IP Authorization, you must identify the public IPv4 address of the machine, server, or cloud instance that will connect to the proxy.

Run one of the following commands from your server terminal to determine your public IP:

curl -4 https://api.ipify.org

2. Adding an Authorized IP

Follow these steps to add a new trusted IP address to your whitelist:

3. IP Status Lifecycle

Once an IP address is added, it transitions through two statuses:

4. Connecting via Authorized IP

Once your status is Active, you can send proxy traffic directly through proxy.mrscraper.com:10000 without passing credentials in the URL.

# Connect directly without username/password
curl -x proxy.mrscraper.com:10000 https://api.ipify.org

import requests

# Set proxy host and port without credentials
proxies = {
    'http': 'http://proxy.mrscraper.com:10000',
    'https': 'http://proxy.mrscraper.com:10000'
}

response = requests.get('https://api.ipify.org', proxies=proxies)
print(f"Connected successfully via IP Auth. Response IP: {response.text}")

const axios = require('axios');

axios.get('https://api.ipify.org', {
  proxy: {
    host: 'proxy.mrscraper.com',
    port: 10000
  }
})
.then(response => console.log('Response IP:', response.data))
.catch(error => console.error('Error:', error.message));

package main

import (
	"fmt"
	"io"
	"net/http"
	"net/url"
)

func main() {
	proxyURL, _ := url.Parse("http://proxy.mrscraper.com:10000")
	client := &http.Client{
		Transport: &http.Transport{
			Proxy: http.ProxyURL(proxyURL),
		},
	}

	resp, err := client.Get("https://api.ipify.org")
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()

	body, _ := io.ReadAll(resp.Body)
	fmt.Printf("Connected via IP Auth. Output: %s\n", string(body))
}

<?php
$ch = curl_init('https://api.ipify.org');
curl_setopt($ch, CURLOPT_PROXY, 'proxy.mrscraper.com:10000');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($ch);
curl_close($ch);

echo "Response IP: " . $response;
?>

5. Country & Session Targeting

With IP Authorization, configure country and session targeting with headers sent to the proxy connection. Do not add targeting modifiers to a username or password.

Configure these values through your HTTP client's proxy-header or equivalent proxy-connection header option. They must be sent to the proxy, not as ordinary headers to the destination website.

For example, the proxy connection should include headers equivalent to:

X-Proxy-Country: us
X-Proxy-Sessid: abcd123
X-Proxy-Sesstime: 10

If your client does not support proxy-specific headers, use a client or adapter that can set headers on the proxy connection. Keep the proxy host, port, and IP Authorization setup unchanged.

6. Managing Whitelisted IPs

You can manage existing authorized IPs directly from the IP Authorization table:

Copying an IP Address

Click the Copy icon in the Action column next to any authorized IP to quickly copy it to your clipboard for verification or sharing with team members.

Removing an IP Address

To remove access for a server or IP:

1. Locate the IP address in the IP Authorization list.
2. Click the Delete icon in the Action column.
3. Confirm the removal prompt. Access will be revoked within 2 minutes.

7. Security Best Practices

• Fixed IPs Only: Only whitelist static public IPs assigned to dedicated servers, cloud instances (AWS EC2, DigitalOcean, GCP), or office routers.
• Avoid Public & Dynamic IPs: Never authorize dynamic home connections, public Wi-Fi networks, or shared VPN endpoints.
• Regular Audits: Periodically review your whitelist and delete unused IPs or those belonging to decommissioned servers.
• Immediate Deletion: Promptly remove server IPs when terminating cloud instances or ending vendor contracts.

Frequently Asked Questions