Build reportTemplates and visual controls use the same deterministic engine.
Metrics
Agentic NOC for Voice Networks
Basic shows the settings required for normal operation. Advanced reveals integrations and internal controls without removing them.
Set these up to get the full value of VoxyWatch. The list checks itself as you configure each one.
Loading HEP sources...
No HEP sources detected yet.
SBCs will appear here as soon as they send HEP packets.
| Source IP | Type | Status | SIP | RTP | RTCP | Total | Sessions | Last activity | Label | Activity / Alarm |
|---|
/.well-known/openid-configuration is appended
Suppresses (deletes) the RTP audio while the customer reads or types their card, so the PAN/CVV is never stored (PCI-DSS Req 3.2). SIP/CDR is kept. Toggle on/off.
Configure webhook, Telegram, incident investigation and digest delivery. Detection rules remain under Configuration → Alerts.
/newbot.bot.Start with the essentials. Advanced tuning stays available without competing with trunk health.
Configure the mail server ONCE; then each user enables "receive incidents by email" in Profile → Notifications. Without this, the email channel stays off.
| User | Role | Last access | ||
|---|---|---|---|---|
| Loading... | ||||
Need a license? voxywatch.com/pricing →
Provide this code to the vendor to generate a license bound to this server.
Read-only SNMP agent so an NMS (Zabbix, PRTG, SolarWinds, LibreNMS, Nagios) can poll capture, VoIP, resource and diagnostic metrics, and receive alert traps.
1.3.6.1.4.1.65985
Connect ChatGPT, Claude, Codex, or another MCP client to live traffic and, with explicit authorization, initial setup. It never controls the SBC.
Use an established identity provider. The token audience must identify this MCP resource.
Read-only REST API for external systems (billing, monitoring) to query CDRs and SIP traces. API key authentication (Bearer). Included in the product, also in the free tier.
| Name | Key | Scopes | IPs | Rate | Last used | State |
|---|
provider/model. Catalog at openrouter.ai/models
💡 Custom — Connect your own Ollama, vLLM or LM Studio server. Enter its chat API URL and exact configured model name. Save, then send a message from LLM chat to test the real request path.
—
The shortest answer to: is it working, is traffic affected, and what should I do next?
Safe checks read local status and public contracts. Tests that send email, Telegram or webhook traffic still require an explicit click in their settings.
Unified live status from inexpensive in-memory snapshots.
—
Market-ready operation, update safety, jobs, AI context and hardware fit.
—
Local ADK-ready sidecar, loopback-only and read-only through the VoxyWatch tool contract.
Review agent-proposed actions before they affect incidents or notifications.
| Status | Action | Title | Risk | Created | Ops |
|---|
Local feedback, shadow readiness and technical traces. Nothing in this section is sent to VoxyWatch.
| Action | Shadow | Feedback | Accuracy | Helpful | Graduation |
|---|
Optional foundations for transcription and protocol detection. They stay off until you enable them.
Coming soon: transcription, WebRTC/TLS/SRTP and T.38 classification. These options do not perform analysis yet and therefore cannot be enabled.
*.ingest.sentry.io · 443/tcp outbound and telemetry.voxywatch.com:8443 · 8443/tcp outbound
Loading diagnostics...
Loading...
VoxyWatch checks hourly for new versions and notifies you in the bell 🔔. Nothing updates by itself — you apply the update here, when it suits you.
Operational setup for traffic attribution, detection and notifications.
Configure trunk health, SIP signaling and learned-pattern detection. Notification delivery and email remain under Settings → Notifications.
These thresholds decide when trunk and shared-endpoint health changes from healthy to warning or critical. Point to or focus the ? beside a field for its exact effect.
| Trunk | Calls | Answered | ASR | NER | ACD | PDD | MOS | Failed |
|---|---|---|---|---|---|---|---|---|
| Loading... | ||||||||
Configure IRSF risk rules, profiles and Flash Call detection. Operational findings appear under Operations → Fraud and Flash Calls.
Carrier catalog — name, direction, SIP endpoints and number prefixes. Feeds per-carrier and per-country analytics.
| Carrier | Direction | IPs | Prefixes | Countries | Health | Status | Actions |
|---|
Upload a CSV (or JSON) with your carriers. The CSV has these columns (first row = headers):
name | Carrier name (required) |
direction | in · out · both |
ips | Carrier endpoints / CIDRs, space-separated (e.g. 200.0.90.33:5070 200.0.90.0/24:5080). No port = 5060. |
prefixes | Routing prefixes, space-separated. Optional country: prefix:Country |
enabled | yes · no |
notes | Free text (optional) |
internal | yes·no (optional) — on-net, no PSTN. Auto-set if name contains ONNET |
alarms | yes·no (optional) — whether it generates alarms. Default yes |
priority | -1000…1000 (optional). Higher wins only when the other rules tie. |
Upload your sip.conf / pjsip.conf / extensions.conf and we auto-detect trunks, IPs and prefixes. You review before importing.
| Sev. | Score | Event | Status |
|---|
| Score | Trunk / source | Probable calls | Cancel timing | Unique destinations | Estimated impact |
|---|
Live per-trunk traffic and health. Managed alerts are available under Active incidents.
💡 Click a trunk for its full history & charts. The more storage you assign to CDRs, the more history the copilot analyzes — and the better its metrics and predictions.
| Carrier | Health |
|---|
Correlates multiple logical trunks by IP and IP:port. Shadow mode observes without creating incidents.
Anomalies detected by the agentic NOC engine, with lifecycle and timeline.
| Severity | Status | Incident | Object | Opened | Duration |
|---|
Build, compare and export reliable voice reports. No LLM is required.
All enabled external trunks are included by default. Choose a custom scope only when you need it.
Discovered dynamically from the canonical CDR projection; saved reports are revalidated when the schema changes.
Loading records from server... |
Scanning capture database...
The portal is ready. Configure your HEP source to start receiving SIP traffic.
Steps to integrate your PBX or SBC:
IP:9060See WIKI_INTEGRATION.md for platform guides (Asterisk, Kamailio, FreeSWITCH, etc.)
Select a session to view the SIP signaling flow, analyze voice quality metrics, and play back the dual-channel stereo audio.
Captured Packets
SIP Call-Legs
RTP Packets
With SIPREC Audio
Click on any message arrow to open the full raw decoder and analyze signaling headers and SDP.
Generating SVG Diagram...
RTP streams (Left/Right G.722 channels) are captured. Press the button to synchronize SSRCs and generate the dual-channel stereo audio.
—
—
I'm your VoIP assistant.
Ask me about SIP, RTP, voice quality or any captured trace.
—
Want to evaluate VoxyWatch without the free-plan limit? Request a full trial license at support@voxywatch.com.