---
sourceDocument: Australia Conversational Interfaces
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/conversational-interfaces

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Conversational Interfaces

ft:clusterId :

    - convint

bundleId :

    - convint

workflow :

    - Platform


---

# Review inbound response REST endpoint and configure inbound authentication

# Review the inbound REST endpoint and configure inbound authentication {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

After you install the Virtual Agent API, navigate to the Scripted REST
API resource to review the endpoint and set up authentication.

## Antes de Iniciar

Role required: admin

## Procedimento

1. Navigate to AllSystem Web ServicesScripted Web ServicesScripted REST APIs.
2. Select the VA Bot Integration record to open it.
3. In the Resources tab, open the BOT Integration record.
4. Review the inbound REST API resource details.  
   The format is: https://\<customer instance\>/api/sn_va_as_service/bot/integration

   For a description of the request parameters and an example send request, see [Virtual Agent Bot Integration API](https://www.servicenow.com/docs/access?context=bot-api&version=australia&pubname=australia-api-reference&ft:locale=en-US).
5. In the Security tab on the same page, select the Requires authentication check box.  
6. Set up Provider Authentication using any of these methods: Basic, OAuth, Hash, or Static Token.  
   Nota:  
   Guest usage via Basic or OAuth is already supported out-of-box when you select Requires authentication. To support user account linking, you must use Static or Hash token-based authentication. You can use token-based authentication (Static or Hash) with or without Basic or OAuth authentication. The token can be passed in either the request body or the header. If the token is specified in both places, the one in the header is accepted.  
   Do one of the following:
   * Set up Basic or OAuth authentication.To learn more about OAuth
     authentication and the possible security configurations for
     scripted REST APIs, see [Enable
     OAuth with inbound REST](https://www.servicenow.com/docs/access?context=t_EnableOAuthWithREST&version=australia&pubname=australia-api-reference&ft:locale=en-US).

   * Set up Message Authentication, which involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity. For details, see [Configure Message Authentication for inbound communication](https://servicenow-prod.fluidtopics.net/mGWnRk~aonLxFI6JLTWN7Q "You can configure Message Authentication for the Virtual Agent API instead of Basic or OAuth. Message Authentication involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity.").
   {#configure-send-request__ul_sb1_bxt_qmb}
{#configure-send-request__steps_zz4_z52_rmb}

## O que Fazer Depois

If you are using Message Authentication, [Configure Message Authentication for inbound communication](https://servicenow-prod.fluidtopics.net/mGWnRk~aonLxFI6JLTWN7Q "You can configure Message Authentication for the Virtual Agent API instead of Basic or OAuth. Message Authentication involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity.").

[Configure the output response REST endpoint and outbound authentication for the Virtual Agent API](https://servicenow-prod.fluidtopics.net/_bwAkJ7jhltzSK0Gsx_SZw "Specify the outbound endpoint URL to which the Virtual Agent responses are posted. Configure outbound authentication.").
* **[Configure Message Authentication for inbound communication](https://servicenow-prod.fluidtopics.net/mGWnRk~aonLxFI6JLTWN7Q)**   
  You can configure Message Authentication for the Virtual Agent API instead of Basic or OAuth. Message Authentication involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity.