AiTitus :)
04/09/2025, 2:04 PMVapi Support Bot
04/09/2025, 2:05 PMvapi.ai
and *.vapi.ai
instead of specific IP addresses [discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639). VAPI's IP management is handled through Cloudflare [discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087).
For properly vetting API calls, here are some recommended practices:
- Ensure you're using the correct API key with necessary permissions
- Store API keys securely (never in client-side code or public repositories)
- Verify your request payload has the correct format and all required fields
- Set the Authorization
header with a JWT token prefixed with Bearer
- Use the appropriate HTTP method for your requests
For SIP-related connections, you can use the FQDN sip.vapi.ai
[discord.com/channels/1211482211119796234/1211483291191083018/threads/1344680024665493524](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1344680024665493524).
Is there anything else you'd like to know about securing your API calls with VAPI?
Sources:
- [Discord Thread 1333797946440941639](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639)
- [Discord Thread 1332665957591679087](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087)Vapi Support Bot
04/09/2025, 2:05 PMShubham Bajaj
04/11/2025, 7:26 AM