To manage the Wavoip tokens used in voice inboxes on Papo, you can view the list of masked tokens per inbox and, when necessary, revoke or generate a new token by accessing the settings of the inbox itself. This management ensures the connection to the telephony system remains secure and under control, without needing to open another dashboard.
Papo stores the Wavoip API token in encrypted form and displays it, in the voice inbox settings, always masked. This keeps the credential protected while you perform auditing and maintenance operations.
| Action | Description | When to use |
|---|---|---|
| View token | Temporarily reveals the full token (only to the logged-in administrator). | To copy the token and validate the connection or prepare a migration. |
| Revoke token | Immediately blocks access using the current token. The voice inbox will be inoperable until a new token is entered. | If there is suspected leakage, deactivation of an employee, or scheduled credential rotation. |
| Generate new token | Replaces the current token with a new one generated by the system itself. After generation, the new value is displayed only once so you can copy it and update the inbox configuration. | Periodic credential rotation, due to security policy, or when the old token is accidentally revoked. |
How to manage Wavoip tokens in Papo
Managing tokens is done directly in the settings of the inbox associated with the voice channel with the Wavoip provider. Access is restricted to users with administrative permissions on the account.
- Go to Settings in the Papo dashboard.
- Go to the Inboxes section and find the Voice inbox that uses the Wavoip provider.
- Click the inbox name to open settings or, if available, the corresponding edit icon.
- On the inbox details screen, scroll to the credentials block. You will find the Wavoip token field, displayed in masked format (e.g.,
••••••••••1234). - To view the full token, click Show token. The actual value will be shown on screen while you are on the page; upon reloading or leaving, it will be masked again.
- To revoke the current token, click Revoke token. From that moment on, the Wavoip integration will be interrupted until a new token is provided. Use this action with caution.
- To generate a new token, click Generate new token. The old token will be permanently invalidated and a new value will be generated. Copy the token immediately and, if necessary, enter it again in the inbox configuration field (if generation does not fill it automatically).
After generating a new token, Papo automatically uses this new credential in API calls to the Wavoip system. No additional action in the Wavoip dashboard is necessary; just ensure the token stored in Papo is the same as the one you initially configured with the provider.
Who needs this management
- IT administrators and operations leaders who need to audit who has access to integrated telephony.
- Companies with security policies that require periodic credential rotation.
- Teams that deactivate voice channels for periods and want to cut the link without deleting the inbox.
- White label resellers who manage multiple accounts and need to apply security best practices to each one.
FAQ
What happens if I revoke a token?
Revoking a token immediately interrupts the voice inbox connection with Wavoip. Agents will no longer be able to make or receive calls on that inbox until a new valid token is entered. The inbox settings and call history are not affected.
Can I have more than one token per inbox?
No. Each Voice inbox with Wavoip uses a single token. If you need multiple telephony connections, create separate inboxes, each with its own token.
Is the token visible to any user on the account?
No. The token is displayed only in masked form in the interface. Only users with administrative permissions can click “Show token” to reveal the full value, and this action is logged for auditing purposes on the platform.
Do I need a Wavoip account to generate the token?
Yes. The token you manage in Papo is the credential that your Wavoip dashboard provides for integration. To get a new token, access your Wavoip dashboard, create an API key, and paste it into the Papo inbox settings.
If I generate a new token in Papo, do I need to update anything in Wavoip?
No. The token generated in Papo only replaces the value stored locally. Since the Wavoip provider expects any valid token you created earlier, just ensure that the token entered in Papo matches an active token in your Wavoip account. If you revoked the token in Wavoip, you will need to generate a new one there and paste it into Papo.
Is it safe to manage tokens directly in the browser?
Yes. Communication between your browser and Papo is done via HTTPS, and the token value is transmitted only at the moment of display or replacement. Papo does not store the token in plain text in the database; it is encrypted.
Start free and centralize voice, WhatsApp, and CRM in one place →
With Papo you integrate your Wavoip telephony and manage everything alongside text channels — without spreading credentials.