> ## Documentation Index
> Fetch the complete documentation index at: https://developers.phonovation.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IP whitelisting

> Configure network access for Phonovation API and webhook traffic.

Add `83.71.142.253` to any IP allowlist used for your Phonovation integration. Connections use HTTPS on TCP port `443` with TLS 1.2.

| Setting     | Value           |
| ----------- | --------------- |
| IP address  | `83.71.142.253` |
| Port        | `443`           |
| Protocol    | HTTPS           |
| TLS version | TLS 1.2         |

## Network flow

```mermaid title="Inbound and outbound network flow" theme={"dark"}
%%{init: {"theme": "base", "themeVariables": {"fontFamily": "Outfit", "fontSize": "16px", "primaryColor": "#fff1ef", "primaryTextColor": "#0f1926", "primaryBorderColor": "#d23a25", "lineColor": "#4b69a0", "secondaryColor": "#eaf0fa", "tertiaryColor": "#edf8f0"}}}%%
flowchart LR
    subgraph Customer["Your network"]
      A["Application"]
      W["HTTPS webhook endpoint"]
    end
    A -->|"TLS 1.2 / TCP 443"| API["Phonovation<br/>83.71.142.253"]
    API -->|"TLS 1.2 delivery receipt"| W
    W -->|"Verify X-Signature"| V["Trusted event processing"]

    classDef customer fill:#eaf0fa,stroke:#4b69a0,color:#0f1926,stroke-width:2px
    classDef phono fill:#fff1ef,stroke:#d23a25,color:#0f1926,stroke-width:2px
    classDef trusted fill:#edf8f0,stroke:#247a4b,color:#0f1926,stroke-width:2px
    class A,W customer
    class API phono
    class V trusted
```

## Outbound rules

Allow HTTPS connections to the hostname your integration uses:

| Destination            | Required for                                               |
| ---------------------- | ---------------------------------------------------------- |
| `api.phonovation.com`  | Health checks, campaign submission, and campaign summaries |
| `auth.phonovation.com` | Optional OAuth password and refresh-token grants           |

If your firewall requires an IP rule, allow `83.71.142.253` on TCP port `443` and permit TLS 1.2.

## Inbound webhook rules

Expose the HTTPS webhook URL configured in the [account portal](https://app.phonovation.com/developer?tab=webhook) and allow traffic from `83.71.142.253` on TCP port `443`.

The IP allowlist is an additional network control. It does not replace `X-Signature` verification or idempotent event handling described in [Webhooks](/phonovation-api/webhooks).
