Static IP Address(s) for VAPI
# support
a
What are the static IP addresses for VAPI so I can insure api calls are properly vetted. Thanks!
v
Hi there! 👋 I wasn't able to provide a list of static IP addresses for VAPI because according to the information I found, VAPI actually uses dynamic IPs rather than static ones. However, I can help with alternative approaches for vetting API calls. According to the information I found, VAPI uses dynamic IPs, so it's recommended to whitelist the domain
vapi.ai
and
*.vapi.ai
instead of specific IP addresses [discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639). VAPI's IP management is handled through Cloudflare [discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087). For properly vetting API calls, here are some recommended practices: - Ensure you're using the correct API key with necessary permissions - Store API keys securely (never in client-side code or public repositories) - Verify your request payload has the correct format and all required fields - Set the
Authorization
header with a JWT token prefixed with
Bearer
- Use the appropriate HTTP method for your requests For SIP-related connections, you can use the FQDN
sip.vapi.ai
[discord.com/channels/1211482211119796234/1211483291191083018/threads/1344680024665493524](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1344680024665493524). Is there anything else you'd like to know about securing your API calls with VAPI? Sources: - [Discord Thread 1333797946440941639](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1333797946440941639) - [Discord Thread 1332665957591679087](https://discord.com/channels/1211482211119796234/1211483291191083018/threads/1332665957591679087)
s
We have dynamic IPs, and you have to whitelist our domain name instead.
6 Views