https://retellai.com/?utm_source=discord&utm_medium=seo logo
where can i get the Retell webhook secret*
# ❓・ai-evy-support
a
@AI Evy where can i get the Retell webhook secret*
a
Thanks for tagging me @AC. I'll look through relevant sources and get back to you shortly.
### Answer The webhook secret for verifying Retell webhooks is your Retell API Key that has a webhook badge next to it. [(1) ]() To use it for webhook verification: 1. Go to your Retell dashboard 2. Navigate to API Keys 3. Look for the API key that has a webhook badge next to it — only this key can be used to verify webhooks You can also allowlist the Retell IP address
100.20.5.228
for additional security. Here's how to use it with the SDK:
Copy code
javascript
import { Retell } from "retell-sdk";

Retell.verify(
  JSON.stringify(req.body) ,
  process.env.RETELL_API_KEY,
  req.headers["x-retell-signature"] as string,
)
**Important**: The webhook secret is the API key with the webhook badge — it is not a separate secret. [(2) ]()
​ To learn more, see the sources I considered: [[1] Secure the webhook](https://docs.retellai.com/features/secure-webhook) [[2] MCP error](https://discord.com/channels/1186424376300679209/1399534474051457135) ​
Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.
a
@AI Evy so if i'm asked for the api keys, shoudl i simply give the same answer or is it different?
a
Thanks for the follow-up, @AC. I'll get back to you soon.
### Answer API keys and the webhook secret are related but serve different purposes: API Keys are used to authenticate your requests to: [(1) ]() - REST API endpoints - SDK integrations - Webhook endpoints You include your API key in request headers like this:
Copy code
Authorization: Bearer YOUR_API_KEY
Webhook API Key is one of your API keys that has been designated specifically for webhook authentication. This designated webhook API key: - Is used to sign and verify webhook requests - Cannot be deleted So the answer depends on what's being asked: - If asked for API keys for general API authentication → provide any of your API keys - If asked for the webhook secret → provide the specific API key that has the webhook badge next to it (as mentioned in the thread) [(2) ]() You can manage your API keys in the dashboard under Settings > API Keys, where you can create new keys, delete existing ones, or set a key as the webhook key.
​ To learn more, see the sources I considered: [[1] API Key Overview](https://docs.retellai.com/accounts/api-keys-overview) [[2] Manage API Keys](https://docs.retellai.com/accounts/manage-api-keys) ​
Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.