> This page is for API Reference.

> Sarvam Voice Agents (Samvaad) is a voice AI agent platform for Indian languages: build, test and deploy AI calling agents on your own phone numbers, from ₹3 a minute. Start here: https://docs.sarvam.ai/voice-agents/why-voice-agents.
> For clean Markdown of any page, append `.md` to the page URL.
> For a complete documentation index, see https://docs.sarvam.ai/llms.txt. For a section index, append `/llms.txt` to any section URL (for example https://docs.sarvam.ai/voice-agents/llms.txt).
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.sarvam.ai/_mcp/server.

# Bring your own key (BYOK) for voice agent data

> Keep control of the encryption keys that protect your voice agent data: how Sarvam calls your hosted key service to authenticate, decrypt and rotate keys.

The Bring Your Own Key (BYOK) feature lets you keep control of the encryption keys used to protect your data. Sarvam integrates with a service that **you host** and makes outbound calls to its endpoints to authenticate, request decryption of data keys, and generate new keys during rotation.

## Authentication methods

You can choose one of two ways to authenticate requests coming from Sarvam:

| Method                 | How it works                                                                                                                                                                       |
| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Client credentials** | Provide Sarvam with a **Client ID** and **Client Secret**. Sarvam calls your `/auth` endpoint to obtain a short-lived JWT, then sends it as a Bearer token on subsequent requests. |
| **Static API key**     | Provide Sarvam with a long-lived **API key**. Sarvam sends this key directly as a Bearer token on every request. The `/auth` endpoint is not used in this case.                    |

## Integration requirements

* **Host the endpoints.** You must host the BYOK endpoints on a secure HTTPS server.
* **Whitelist Sarvam's egress IPs.** Configure your firewall to allow incoming requests from Sarvam's egress IP addresses. Contact Sarvam support for the current list.