# Need to restrict dashboard access, but allow API endpoint use

**URL:** https://forum.mautic.org/t/need-to-restrict-dashboard-access-but-allow-api-endpoint-use/21880
**Category:** Product Support
**Created:** [December 2, 2021, 11:06pm UTC](https://forum.mautic.org/t/need-to-restrict-dashboard-access-but-allow-api-endpoint-use/21880 "2021-12-02T23:06:11Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![davidg](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/davidg/32/2761_2.png) [@davidg](https://forum.mautic.org/u/davidg)
#### Post date: [December 2, 2021, 11:06pm UTC](https://forum.mautic.org/t/need-to-restrict-dashboard-access-but-allow-api-endpoint-use/21880/1 "2021-12-02T23:06:11Z")

</div>

When ever I restrict all IPs but mine (.htaccess in root html):

```auto
<RequireAll>
   Require ip 12.123.123.12 # My dedicated IP VPN
<RequireAll>

```

The dashboard access works as expected - only from my dedicated IP, but this also restricts any GET/POST access to the mautic endpoint /api/contacts. How can I circumvent this?

From my understanding, the mautic API endpoint has a listener on its own like express, why is apache involved in this process?

**TD;DR - I need my mautic dashboard to be restricted to 1 IP address, whilst having the api of mautic to be public and unrestricted.**