Settings

All runtime configuration lives here once the Setup Wizard has been completed. Every field includes inline helper text and a Learn more link that deep-links to the matching docs page.

Backend tab

• Pick the active outbound provider or swap to Test Mode without touching .env
• Each provider reveals only the fields it needs (Phaxio keys, Sinch project ID, SIP trunk credentials, etc.)
• Security profiles (HIPAA vs Non-PHI) control defaults like HTTPS enforcement and signature verification
• Applying changes regenerates the plugin config and restarts the API in-place

Security tab

• Require REST API keys and mint them on the API Keys page
• Enforce HTTPS for callback URLs, toggle audit logging, and set rate limits
• Adjust max upload size and allowed file types; warnings surface in Send Fax when values are restrictive

Storage & Inbound tab

• Select local storage (dev only) or S3/S3-compatible with optional SSE-KMS
• Configure inbound fax retention windows, download token TTL, and per-scope rate limits
• Warnings surface when HIPAA defaults are relaxed so you can document exceptions

MCP tab

• Enable/disable Node and Python MCP transports (stdio, HTTP, SSE)
• Provide OAuth issuer/audience for SSE when handling PHI
• Copy/paste starter configs for Claude Desktop, Cursor, and Windsurf

Export & versioning

• Download the resolved config for change control
• Reapply the last known-good configuration if a test change causes an outage

Need step-by-step provider help? Jump to Backends for detailed walkthroughs tailored to each option.

Under the Hood

• Read settings: GET /admin/settings (sanitized values for display)
• Validate backend creds: POST /admin/settings/validate
• Apply runtime changes: PUT /admin/settings
• Reload from environment: POST /admin/settings/reload
• Persist a server-side .env: POST /admin/settings/persist (when enabled)