API Reference
SIP Trunk

Disconnect the workspace's SIP trunk

DELETE
/v1/sip-trunk

Refused while any BYO numbers still ride the trunk — release them first.

Authorization

bearerAuth
AuthorizationBearer <token>

Long-lived ES256 JWT minted from the dashboard (https://app.sautikit.com/developers/api-keys). Signed by the platform keyring. Carries workspace_id and scopes claims; revoked via the platform deny-list.

In: header

Response Body

application/json

application/json

curl -X DELETE "https://example.com/v1/sip-trunk"
Empty
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ]  }}
{  "error": {    "code": "validation.bad_request",    "message": "string",    "request_id": "string",    "details": [      "string"    ]  }}

Connect or update the workspace's SIP trunk PUT

Upserts the workspace's single trunk — there is no trunk ID in the path because a workspace has only ever had, at most, one. Refused with `workspace.locked_to_platform_numbers` on a workspace that already buys numbers from Sautikit. For a `registration` trunk, the password is pushed to Sautikit's box and a REGISTER is attempted synchronously, inside this same request (up to ~20s). The response's `status` reflects the outcome immediately: `active` on success, `failed` (with `last_error`) if the provider rejected the credentials or was unreachable — the workspace stays unlocked either way until it actually succeeds. Omit `password` on a later `PUT` to keep the password already on file (e.g. when only changing a label); a password rotation re-signals every active BYO number on the trunk automatically. For an `ip_allowlist` (signaling) trunk, this only submits the trunk for review — it lands at `pending_approval` and does not go live, or lock the workspace, until a person on Sautikit's operations team approves it and installs both the signalling and media IPs on the box.

Upload a greeting audio file (mp3/wav) for voicemail playback POST

Streams the uploaded file to Sautikit's object storage and returns a signed `storage.sautikit.com` playback URL — the same branded-CDN mechanism `GET /v1/calls/{call_id}/recording` uses for captured call recordings. Intended for the dashboard's voicemail "Play a recording" upload; the returned `url` is what you pass as `voicemail.greeting_play_url` on `PUT /v1/numbers/{id}/routing`. Accepts `multipart/form-data` with a single `file` field. Only `audio/mpeg` (mp3) and `audio/wav` (`audio/wav`, `audio/wave`, `audio/x-wav`) are accepted — anything else is rejected with `uploads.unsupported_media`. Max size 10 MiB (`uploads.too_large` above that). The returned URL is presigned for 7 days (SigV4's maximum) — re-POST the same file to mint a fresh URL once it expires.