Connect based apps already have a by-pass for IP allow-list per JWT authentication method, but for certain app features where the use of the api.atlassian.com infrastructure is necessary, requests will be blocked.

In some cases, the IP ranges from the add-on vendor may exceed the limits of the Atlassian IP allow-list policy.

Suggestion

Implement support for the JWT authentication method for by-passing IP allow-list.