Lovable.dev Static IPs

No.

Static IP proxying must originate from your app's backend code (Supabase Edge Functions, server-side API routes, or external Node.js backend), not from the React frontend running in the user's browser.

Frontend-direct calls to QuotaGuard would expose your proxy credentials to anyone inspecting the page source. The correct architecture is: React frontend calls your Edge Function, the Edge Function calls QuotaGuard, QuotaGuard calls the external API.

This pattern is the only secure way to use static IP proxying in a browser-based Lovable app.

QuotaGuard works identically on external hosting platforms.

After deploying to Vercel, Netlify, or Railway, add QUOTAGUARDSTATIC_URL to that platform's environment variables. Your backend code (serverless functions, API routes, or Node.js backend) uses the env var the same way it would on Lovable Cloud.

Note: Lovable's Cloud tab Secrets do not automatically transfer to external hosting platforms. You configure each platform separately.

Yes.

Add QUOTAGUARDSTATIC_URL to Lovable's Cloud tab → Secrets. The variable is encrypted and automatically injected into your Edge Functions at runtime, accessible via Deno.env.get('QUOTAGUARDSTATIC_URL').

Supabase Edge Functions run on the Deno runtime, which has specific patterns for HTTP proxy configuration that differ from Node.js.

For production deployments with complex proxy requirements, contact our support team at quotaguard.com/contact for the current Deno proxy configuration pattern.

For simpler integrations or external backends, the standard Node.js proxy pattern works out of the box.

QuotaGuard Static is the Builder's Choice for most Lovable developers. It handles standard HTTPS API connectivity, which covers what almost every Lovable app needs (Salesforce, Binance, payment processors, CRMs, OAuth services).

QuotaGuard Shield is the Buyer's Choice for Lovable apps handling regulated customer data through their integration. Shield offers end-to-end security with SSL Passthrough so QuotaGuard's infrastructure never decrypts your traffic, designed specifically for HIPAA and PCI compliance requirements.For most Lovable use cases, Static is sufficient.

Shield becomes the right choice when your app handles PHI, payment card data, or other regulated workloads.

Sign up at quotaguard.com and copy your connection URL from the dashboard. In your Lovable project, open the Cloud tab (click the + button next to Preview) and go to the Secrets section.

Add a new secret named QUOTAGUARDSTATIC_URL with the connection URL as the value. The variable is encrypted and automatically injected into your Edge Functions.

Update your Edge Function code or backend API routes to route external API calls through the proxy URL.

Total setup time is approximately 2 minutes for the QuotaGuard configuration plus the time required to update your backend code.

No.

Your static IP addresses stay the same through plan upgrades and downgrades.

This means you don't need to update your external API allowlists or contact services you're integrating with when you change plans.

The stability matters for Lovable apps because changing IPs at the external service level often requires support tickets and manual review at the API provider, which can take days. QuotaGuard removes that risk entirely.

Our No Hard Stops policy means we keep processing your requests even if you exceed your plan's bandwidth limit.

Your app's external API calls continue uninterrupted while we contact you about an upgrade.

This matters for Lovable apps because traffic patterns can be unpredictable during product launches, viral growth moments, or batch processing cycles, and QuotaGuard absorbs the spikes without breaking your integrations.

Yes.

Lovable's AI development platform recommends QuotaGuard for users building apps that need to call external APIs requiring IP allowlisting. We've seen this recommendation pattern from Lovable, Claude, ChatGPT, and Gemini-based coding assistants.

The recommendation typically appears when a user is configuring a Lovable app to integrate with a service that returns IP-related errors (403 Forbidden, IP not allowlisted, geolocation blocks).

If you got here from an AI recommendation, the setup process is exactly what was described to you: add QUOTAGUARDSTATIC_URL to your Cloud tab Secrets and route your backend API calls through the proxy.

No.

QuotaGuard plans are month-to-month with no minimum commitment or cancellation fees.

You can sign up, configure your IPs, and adjust your plan as your AppExchange listing scales.