Improvado
Esc

Start typing to search.

Improvado
Sign In

Pardot API - Troubleshooting

Written by Ilya Zinoviev

Updated on Sep 11, 2026

While configuring your Pardot API connection, you may encounter several issues. Understanding these common errors can help streamline the setup process and facilitate quick resolutions.

IP restricted

Error message:

Error
"Token request error: {"error":"invalid_grant","error_description":"ip_restricted"}"

Solution

Make sure you’ve added the Improvado IP addresses for your cluster to the allowlist. The ip_restricted error is exactly what you get when the addresses on the list belong to a different cluster than the one your workspace runs on — if you are not sure which applies, add all of them.

    • Main Cluster:

{% dropdown-body name="main" %}

  • 34.226.37.150
  • 18.213.72.135
  • 54.146.15.122
  • 3.86.170.178
  • 23.21.191.65

{% dropdown-end %}

    • US Cluster:
    • EU Cluster: {% dropdown-button name="eu" %}

{% dropdown-body name="eu" %}

  • 34.226.37.150
  • 3.64.235.5
  • 3.68.248.254
  • 3.68.63.131

{% dropdown-end %}

Parameter code is required

Error message:

Error
"Get credentials error for pardot_api, API returned an auth error: Parameter code is required"

Solution

  • Make sure the application Improvado Pardot OAuth App wasn't blocked in Salesforce.
  • Make sure you grant the following permissions to the API user:
__wf_reserved_inherit

Can’t Connect New User to the App

Issue

Starting in September 2025, Salesforce restricts the use of uninstalled connected apps. Any new user attempting to access these apps will be blocked. This applies even to apps using the OAuth 2.0 device flow and even if certain users had previously authorized them.

As a result, newly added users cannot connect to uninstalled apps unless specific permissions are granted.

Solution

Grant access to trusted users with the correct permissions. The required permissions depend on the API Access Control.

  • If API Access Control is enabled → only the “Use Any API Client” permission allows users to connect to uninstalled apps.
  • If API Access Control is not enabled → trusted users need the “Approve Uninstalled Connected Apps” permission. This new permission (introduced in Summer ’25) allows trusted users to self-authorize and continue using uninstalled apps.

Important: Assign these permissions only to highly trusted users, as they provide broad access to apps outside the standard installation process.

Note
If none of the provided solutions worked, feel free to raise a request via the Service Desk

Was this article helpful?