Plum IVR Support

I've searched the forum and documentation but didn't see this addressed. How can our server application that serves the VXML authenticate that the client is the Plum Voice IVR interpreter, and not some other (unauthorized) client? For example, can you pass client certificates, or basic auth credentials, or a valid app ID token, VPN, etc.?

If it's an application-level control (like basic auth credentials or an app token) where are those configured?

Hi,

We recommend implementing firewall security that will allow Plum's IVRs to make requests to your web server for your start_url.

Requests can come from:
69.25.74.64/26
4.28.108.192/26 (non-demo)
107.150.140.0/26 (non-demo)

Regards,
Plum Support