General Settings
Manage API keys, webhook endpoints, IP allowlisting, and email configuration.
The General Settings page contains the technical configuration for your VoiceCenter tenant. This is where you set up integrations, secure your account, and configure how VoiceCenter communicates with external systems.
API Keys
API keys let external systems authenticate with the VoiceCenter API on behalf of your tenant. Each key has a defined scope that limits what it can access.
Creating an API Key
Navigate to Settings
Open Settings from the main menu.
Open the API Keys tab
Click the API Keys tab.
Click Create Key
Click Create API Key and fill in:
Field Description Name A label to identify this key (e.g., "CRM Integration") Scopes The permissions this key grants (e.g., read contacts, write calls) Copy the secret
The API secret is displayed once. Copy it immediately and store it securely. You will not be able to see it again.
If you lose an API key secret, you must revoke the key and create a new one. There is no way to retrieve a secret after creation.
Revoking a Key
Click the Revoke button next to any key. The key stops working immediately. Active integrations using that key will begin receiving authentication errors.
Webhooks
Webhooks push event notifications to your external systems in real time. When something happens in VoiceCenter (a call ends, a contact is created, a payment is received), the system sends an HTTP POST request to your configured URL.
Creating a Webhook
Open the Webhooks tab
In Settings, click the Webhooks tab.
Click Create Webhook
Enter the following:
Field Description URL The HTTPS endpoint that will receive events Events Which event types to send (e.g., call.ended, contact.created) Secret An auto-generated signing secret for payload verification Test the webhook
Click Test to send a sample event to your endpoint. Verify that your server returns a 200 response.
Save
Click Save. The webhook begins receiving real events immediately.
Webhook Delivery
- Events are delivered as signed HTTP POST requests with a JSON body.
- Each delivery includes a signature header so your server can verify the payload came from VoiceCenter.
- Failed deliveries are retried automatically with exponential backoff.
- The delivery log shows the status of each attempt.
Always verify the webhook signature on your server. This prevents malicious third parties from sending fake events to your endpoint.
IP Allowlist
The IP allowlist restricts which IP addresses can access the VoiceCenter API and portal for your tenant.
Adding an IP Address
Open the IP Allowlist section
In Settings, find the IP Allowlist panel (in the General tab).
Click Add Entry
Enter an IPv4 address or CIDR range (e.g.,
203.0.113.0/24).Save
Click Add. The restriction takes effect immediately.
Be careful when adding IP allowlist entries. If you add an entry and your current IP is not included, you will be locked out. Always add your current IP address first.
When the allowlist is active, requests from non-listed IPs are blocked with an access-denied error. Removing all entries disables the allowlist, returning to open access.
Email / SMTP Configuration
Outbound email (password reset links, notifications, invoice delivery) is configured through environment variables on the API server, not through this page.
Required environment variables:
| Variable | Description |
|---|---|
SMTP_HOST | SMTP server hostname |
SMTP_PORT | SMTP server port (typically 587 for TLS) |
SMTP_USER | SMTP authentication username |
SMTP_PASS | SMTP authentication password |
SMTP_FROM | The "From" address on outgoing emails |
Until SMTP variables are configured, the API logs outbound emails to the server console instead of sending them. This is useful for development but means password reset and notification emails will not be delivered in production without SMTP setup.