> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leamout.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Carrier connections

> Configure carrier identity, authentication, limits, source IPs, and validation.

A carrier connection is the organization-owned security and policy boundary for a SIP carrier.

It can define:

* provider and display name;
* active/disabled status;
* whether inbound calling is enabled;
* outbound digest authentication;
* inbound digest or source-IP authentication;
* allowed source CIDRs;
* CPS, concurrent-call, and daily-minute limits;
* codecs and media capability flags.

Carrier secrets are encrypted in control-plane storage. Public responses expose booleans such as `has_outbound_credentials` rather than returning stored secrets.

## Validate a connection

`POST /v1/carrier-connections/{carrier_connection_id}/validate` performs bounded validation, including SIP endpoint checks. The response reports an overall `valid` flag, issues, endpoint reachability, response code, latency, and error details when present.

## Source-IP authentication

Add a trusted CIDR with:

```json theme={null}
{
  "cidr": "203.0.113.10/32"
}
```

Active source-IP policy is applied to new carrier traffic without requiring a customer-visible runtime restart.