Phonic · Authentication Profile

Phonic Authentication

Authentication

Phonic secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanyArtificial IntelligenceVoice AIConversational AISpeechVoice AgentsTelephonySpeech to Speech

Methods: http Schemes: 1 OAuth flows: API key in:

Security Schemes

bearerAuth http

scheme: bearer

Source

Authentication Profile

generated: '2026-07-20'
method: searched
source: openapi/phonic-openapi-original.yaml
docs: https://docs.phonic.co/docs/authentication/overview
summary:
  types:
  - http
  mechanisms:
  - api-key
  - session-token
  - jwt
  transport:
    rest: 'Authorization: Bearer <PHONIC_API_KEY or JWT>'
    websocket: 'wss://api.phonic.ai/v1/sts/ws?session_token=<token> (or ?jwt=<jwt>)'
schemes:
- name: bearerAuth
  type: http
  scheme: bearer
  description: Bearer authentication header of the form `Bearer <PHONIC_API_KEY>`. Manage your
    API keys at https://phonic.co/api-keys.
  sources:
  - openapi/phonic-openapi-original.yaml
mechanisms:
- id: api-key
  lifetime: permanent
  minted_by: You, in the Phonic dashboard
  use_when: Server-to-server calls. Never expose to a browser.
  passed_as: 'Authorization: Bearer <PHONIC_API_KEY>'
  manage_url: https://phonic.co/api-keys
- id: session-token
  lifetime: 60s to 1h
  minted_by: Phonic, minted from your API key
  use_when: Browser or mobile clients where you do not want to ship your API key. Simple to revoke.
  minted_via: openapi/phonic-openapi-original.yaml#POST /auth/session_token
  docs: https://docs.phonic.co/docs/authentication/session-tokens
- id: jwt
  lifetime: You choose (recommended <= 15 min)
  minted_by: Your own auth system (signed with your key; Phonic verifies without a round-trip)
  use_when: Enterprise integrations with an existing identity system needing per-user / per-conversation scoping.
  minted_via: openapi/phonic-openapi-original.yaml#POST /auth/conversation_token
  docs: https://docs.phonic.co/docs/authentication/jw-ts

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/phonic-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.