AC
01/27/2026, 5:31 PMAI Evy
01/27/2026, 5:31 PMAI Evy
01/27/2026, 5:32 PM100.20.5.228 for additional security.
Here's how to use it with the SDK:
javascript
import { Retell } from "retell-sdk";
Retell.verify(
JSON.stringify(req.body) ,
process.env.RETELL_API_KEY,
req.headers["x-retell-signature"] as string,
)
**Important**: The webhook secret is the API key with the webhook badge — it is not a separate secret. [(2) ]()AI Evy
01/27/2026, 5:32 PMAI Evy
01/27/2026, 5:32 PMAC
01/27/2026, 5:34 PMAI Evy
01/27/2026, 5:34 PMAI Evy
01/27/2026, 5:34 PMAuthorization: Bearer YOUR_API_KEY
Webhook API Key is one of your API keys that has been designated specifically for webhook authentication. This designated webhook API key:
- Is used to sign and verify webhook requests
- Cannot be deleted
So the answer depends on what's being asked:
- If asked for API keys for general API authentication → provide any of your API keys
- If asked for the webhook secret → provide the specific API key that has the webhook badge next to it (as mentioned in the thread) [(2) ]()
You can manage your API keys in the dashboard under Settings > API Keys, where you can create new keys, delete existing ones, or set a key as the webhook key.AI Evy
01/27/2026, 5:34 PMAI Evy
01/27/2026, 5:34 PM