Integration help
# support
a
We are currently evaluating an integration with a telecom provider (MTN Ghana) that offers SIP trunk services. Before implementation, we would like to confirm the architecture. Can Vapi act as the SIP endpoint for a third-party telecom SIP trunk (for example, from a carrier such as MTN), allowing inbound calls from the carrier to be delivered directly into Vapi voice agents? Or is an intermediary PBX/SIP server such as Asterisk or FreePBX required between the telecom provider and Vapi? We are trying to determine the recommended production architecture before proceeding with the carrier integration.
s
Hi Adom, Yes, Vapi can act as the SIP endpoint directly. No intermediary PBX (Asterisk, FreePBX, etc.) is required.
The setup would be: 1. Create a BYO SIP Trunk credential in Vapi with MTN's gateway IP, port, and protocol details 2. Register a BYO phone number linked to that credential 3. MTN routes inbound calls to your Vapi SIP URI:
<credential-id>.sip.vapi.ai
4. Vapi handles the call and connects it to your voice agent
You'll need to share Vapi's SIP IPs with MTN for their allowlisting:
Copy code
44.229.228.186
44.238.177.138
A few things to confirm with MTN before setup: - What transport protocol they support (UDP, TCP, or TLS) - Whether they use IP-based authentication or registration-based (username/password) - What number format they send in the SIP INVITE (E.164 with or without
+
)
j
Yes, Vapi can act as the direct SIP endpoint — it has its own SBC (Session Border Controller) nodes, so MTN just needs to point inbound calls to Vapi's SIP URI (sip.vapi.ai) and whitelist Vapi's signalling IPs. (Vapi) No Asterisk or FreePBX needed in the middle. The key on MTN's side is making sure they forward calls to the correct SIP URI format and that Vapi's IPs are properly whitelisted — skipping that step is usually what causes 401 unauthorized errors on first setup. (Vapi) One thing worth confirming early: does MTN Ghana support credential-based auth (username/password) or are they expecting pure IP authentication? Vapi actually recommends against IP-only auth on shared infrastructure since it can cause misrouted calls. ( @Adom Isaac