If your algo places orders through a broker API, the broker keeps one static IPv4 on that key. Orders from any other address are refused. Host the strategy on a VPS, paste that VPS address into the console, and prove the whitelist by getting a rejection from a second network.
What the April 2026 retail framework requires
The retail framework brokers cite stores one static IPv4 against the API key. That address maps to one client at a time. API sessions are logged out each day, and the broker's risk checks stay on the connection.
At or under 10 orders a second, per exchange or segment, the published norm does not ask you to register the strategy. The exchange tags the order with a generic algo id. Above that line you register through the broker, and the exchange sends back an id. Confirm the live number, because the exchange can revise it.
If you hold more than one API key, unregistered algos stay on the one key the broker designates. The other keys are for algos that already have an exchange id.
Public write-ups cite SEBI circular SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/13 of 4 February 2025, an NSE note in May 2025, and a broker go-live discussed as 1 April 2026. Those write-ups also say an earlier date was extended. The notice in your broker console is the date you trade on.
Who needs a static IP on the API
You need the whitelist when a script, a webhook, or a program on a server sends the order through the broker API. A bot on a VPS is in that group. So is any tool you have given the API key to.
You are outside that map when every order is clicked inside the broker's own website or app. There is no separate source address to pin. A chart that never places an order is in the same group.
If the server places orders for anyone other than that one client, each client needs a separate static IPv4. Parking several unrelated accounts on one address is the pattern broker explainers flag.
- API, webhook, or a bot: the static IPv4 goes on the key.
- Clicks only in the broker app: nothing to whitelist.
- Other people's accounts: a separate address for each client.
How a VPS address passes the broker whitelist
A home line often receives a new address when the router reconnects. The next order then leaves from an address the key does not list, and the API refuses it. A VPS is given one IPv4 that is still there after a reboot. That is the address you paste in.
An ISP can pin an address to the house. That address stays at the house, so a laptop at the office is a different source and fails the check. A shared VPN exit is not your address either. Many people use it, and you may not keep it.
Use IPv4 unless the broker console has a field that accepts IPv6. Broker notes have generally not said IPv6 is enough on its own.
- Open the trading VPS panel and copy the IPv4. Reboot once and check that the same address is still listed.
- In the broker API console, add that IPv4 to the key and finish the OTP or callback the broker sends.
- Run the strategy on that VPS so the order leaves from the copied address. A Kite Connect walk-through is on the Zerodha algo VPS guide. Other broker APIs use the same idea.
- From a phone hotspot, send a test with the same key. The broker should refuse it. That refusal is the proof.
- Leave the bot on the VPS. Do not also send live orders from the laptop on the home line.
It worked when the VPS order is accepted and the hotspot order is rejected, before you put on live size.
Family accounts, a changed IP, and two places
One static IP belongs to one client. Family members can share it only after the broker records written consent or a 2FA request. A second person logging in quietly is not that consent.
Broker summaries of the exchange norm allow the mapped address to be updated on a weekly cycle. Do it while the market is shut. If the address changes while the bot is sending, new calls from the old address fail. Orders the exchange has already accepted are not cancelled by that check.
| Situation | What to whitelist |
|---|---|
| One client, one bot | That client's static IPv4 on the key |
| Two family accounts | Same address only after the broker's consent or 2FA |
| Two unrelated clients | A different static IPv4 for each client |
| The address must change | Update in the weekly window, then move the bot |
What the VPS costs, and what WebJi does not do
No monthly amount is printed for this setup. A machine with a fixed IPv4 is quoted by email before you pay. Write to support@webji.services. Replies are in Hindi and English, and the average first reply is under 60 minutes. Do not use the office phone as a support line.
WebJi® hosts the server. We are not your broker and we are not SEBI. We do not register the strategy, we do not hold the API key, and we do not enter the address in the broker console. You do that. Free migration of an existing server is subject to terms and approval. It is not instant.
Frequently Asked Questions
What is the SEBI static IP rule for algo trading?
Brokers store one static IPv4 on the API key used for retail algo orders. Calls from any other address are refused. The 4 February 2025 SEBI circular and later exchange notes are what brokers cite. Confirm the live date in your broker console, because published go-live dates have already moved.
Do I need a static IP if I only use the broker app?
No. If every order is clicked inside the broker's own website or app, you are not sending an API call from your machine, so there is no source address to whitelist. A script, a webhook, or a bot on a server does need the static IPv4.
How do I whitelist a VPS for algo trading?
Copy the IPv4 from the VPS panel, add it to the API key in the broker console, and complete the broker's OTP. Then place a test from the VPS and a test from another network. The second one should be rejected.
Can two accounts share one static IP?
One static IP maps to one client. Family members may share it only when the broker has written consent or a 2FA request on file. Unrelated accounts each need their own address.
What if my IP changes during market hours?
New API calls from the old address fail. Orders the exchange has already accepted stay there. Update the key only in the broker's change window, with the market shut, and move the bot after the new address is saved.
Will WebJi register my algo or call the broker?
No. WebJi® provides the VPS. You whitelist the address, and you register a strategy with the broker if you are over the exchange threshold. The VPS fee is quoted by email at support@webji.services before you pay.