CENCommunity setup guide · Customer guide
API authentication
Use HTTPS with Authorization: Bearer <key>. Network keys begin cen_net_; network owners issue, replace and revoke them in manage.cenpbx.com → your network → API access, after confirming their password. CEN stores only a SHA-256 hash and shows the key once. A key identifies the calling network; request parameters cannot change that identity. Never put keys in URLs, logs or support messages. Replacing a key can keep the previous one valid for 15 or 60 minutes; revocation is immediate. Invalid, expired and revoked keys return 401. Suspended, retired and outbound-disabled networks return 403. Network keys, legacy cen_live_ block keys, IAX trunk secrets and the token CEN sends to your Routing API are four separate credentials.