Access lists let you allow or restrict access based on a predefined list of users—for example, emails, wallet addresses, or other unique identifiers. You manage lists in the Dynamic developer console; no code is required for basic allow/block behavior.
Go to Access Control in your developer console.
Two outcomes
When you create a gate that uses an access list, you choose one of:
- Allow Site Access – Users not on the list are blocked at sign-in (no JWT is issued). Works with any integration; no SDK needed for enforcement.
- Return scope – Users on the list get a scope added to their JWT. Use this for fine-grained UI (for example, showing beta features). Reading scopes and customizing the experience is SDK-specific; see the links below.
Setup
- Click Create new gate.
- Name your gate.
- Select the outcome: Allow Site Access or Return scope.
- Choose the type of identifier (email, wallet address, or other).
- Enter the identifier. You can add an alias to keep track of users.
- Click Add + to add the user to the list. Repeat as needed.
- Save and enable the toggle.
You can create multiple lists (for example, VIPs, beta users, internal users). A user only needs to be in one of the lists to pass.
To customize the images shown when a user is blocked or allowed (for example, in the Dynamic widget), see General Settings in the developer console.
Advanced usage
For reading scopes in-app please consult the SDKs below:
API
To manage access lists programmatically, use the Allowlists API. Last modified on September 21, 2026
