What authentication does the Phaxio Fax API use?

Phaxio uses HTTP Basic authentication. Your API key serves as the username and your API secret serves as the password. Through Jentic, these credentials are stored encrypted in your Jentic One instance, so agents never handle raw secrets directly.

Can I send a fax to multiple recipients with the Phaxio API?

Yes. The POST /faxes endpoint accepts multiple recipient phone numbers in a single request. Each recipient gets an individual delivery status that you can track via GET /faxes/{id}. Supported file formats include PDF, DOC, DOCX, and plain text.

What are the rate limits for the Phaxio Fax API?

Phaxio rate limits are tied to your account plan. The API returns HTTP 429 when limits are exceeded. Fax delivery itself is constrained by phone line capacity rather than API rate limits, so large batch sends are queued and processed sequentially per recipient number.

How do I retrieve a received fax as a PDF through Jentic?

Search Jentic for 'download fax content' to find the GET /faxes/{id}/file operation. Load the schema, provide the fax ID from your inbound webhook payload, and execute the call. Jentic returns the PDF binary content with the correct content-type header.

Which area codes can I provision fax numbers in?

Use GET /public/area_codes to retrieve the full list of available area codes. You can filter by state or country. Phaxio supports US and Canadian area codes including local and toll-free numbers. Provisioning is immediate once you select an available number.

Can I limit what my agent is allowed to do with the Phaxio Fax API?

Yes. Because you run Jentic One yourself, your own rules decide which Phaxio operations and credentials your agent may use. Phaxio puts the fax id in the URL path (/faxes/{id}), so you can pin the agent to a single fax and let it only read that fax, download its file (GET /faxes/{id}/file), cancel it, or resend it. You pick the exact operations it can call, so sending a new fax (POST /faxes) or provisioning a phone number stays off limits unless you grant it. Your API key and secret are held by your own instance and injected only at execution, never exposed to the agent.