Security

The API is protected by:

1. IP whitelisting is employed. Customer must provide MMS with a list of IP addresses that will use this API to send messages. The number of whitelisted IPs should be kept to a minimum, guidance 1-10 IPs to cover all test, staging and production servers.
2. Software firewall, details are confidential. If you do receive a 403 error and you are sure your IP has been whitelisted you have triggered a firewall rule.
3. Authentication; A base 64 encoded authentication header has to be sent (basic authentication).
4. Application credentials; Specific to your transportcode (Short or Longcode) you have to include your access credentials within the HTTP request.