typos

Author: rodber

application/configuration/environment.md

@@ -137,13 +137,17 @@ Environment variables for configuring the service provider.
 
 Environment variables for configuring multi-tenancy.
 
-| Variable                     | Example                       |
-| ---------------------------- | ----------------------------- |
-| CHEVERETO_TENANTS_PUBLIC_KEY | your_tenants_public_key       |
-| CHEVERETO_TENANT_ENFORCED    | {"CHEVERETO_MAX_USERS":"100"} |
-| CHEVERETO_TENANT             | tenant1                       |
-
-Variable `CHEVERETO_TENANT_ENFORCED` is a JSON object that defines which variables will be enforced (overridden) for the multi-tenant context. Variable `CHEVERETO_TENANT` is intended to be used to pass the current tenant context for CLI.
+| Variable                         | Example                       |
+| -------------------------------- | ----------------------------- |
+| CHEVERETO_TENANTS_PUBLIC_KEY     | your_tenants_public_key       |
+| CHEVERETO_TENANTS_API_ALLOW_LIST | 200.200.200.200,10.0.0.0/24   |
+| CHEVERETO_TENANT_ENFORCED        | {"CHEVERETO_MAX_USERS":"100"} |
+| CHEVERETO_TENANT                 | tenant1                       |
+
+* `CHEVERETO_TENANTS_PUBLIC_KEY` is used to sign requests to the [Tenants API](../../api/4/tenants.md).
+* `CHEVERETO_TENANTS_API_ALLOW_LIST` is used to restrict access to the [Tenants API](../../api/4/tenants.md) by IP address or network.
+* `CHEVERETO_TENANT_ENFORCED` is a JSON object that defines which variables will be enforced (overridden) for the multi-tenant context.
+* `CHEVERETO_TENANT` is intended to be used to pass the current tenant context for CLI.
 
 ## Toggles
 

application/configuration/multitenancy.md

@@ -146,6 +146,14 @@ app/bin/tenants -C api:key:delete --id 1
 app/bin/tenants -C api:key:delete --name "My Key"
 ```
 
+## Restricting access to the Tenants API
+
+In addition to API keys, access to the [Tenants API](../../api/4/tenants.md) can be restricted to specific IP addresses or networks. Use the `CHEVERETO_TENANTS_API_ALLOW_LIST` environment variable to define the allowed sources.
+
+```plain
+CHEVERETO_TENANTS_API_ALLOW_LIST="200.200.200.200,10.0.0.0/24,203.0.113.0/28"
+```
+
 ## Managing tenant plans
 
 Tenant plans define default limits and environment variables, similar to a template. When a tenant is assigned to a plan, it inherits the plan’s limits and environment, which the tenant can still override.