<h2>Review the inbound REST endpoint and configure inbound authentication</h2><br/><div style="overflow-x:auto"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta content="text/html; charset=UTF-8" /><meta name="copyright" content="(C) Copyright 2025" /><meta name="DC.rights.owner" content="(C) Copyright 2025" /><meta name="generator" content="DITA-OT" /><meta name="DC.type" content="task" /><meta name="DC.title" content="Review the inbound REST endpoint and configure inbound authentication" /><meta name="abstract" content="After you install the Virtual Agent API, navigate to the Scripted REST API resource to review the endpoint and set up authentication." /><meta name="description" content="After you install the Virtual Agent API, navigate to the Scripted REST API resource to review the endpoint and set up authentication." /><meta name="DC.coverage" content="translation-type:source" /><meta name="DC.relation" scheme="URI" content="../../../administer/virtual-agent/concept/virtual-agent-api.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/virtual-agent/concept/virtual-agent-landing-page.html" /><meta name="DC.relation" scheme="URI" content="../../../administer/virtual-agent/concept/using-virtual-agent.html" /><meta name="DC.contributor" content="Asha Hawkesworth" /><meta name="DC.creator" content="ServiceNow" /><meta name="DC.date.created" content="2023-08-03" /><meta name="DC.date.modified" content="2025-01-30" /><meta name="DC.format" content="XHTML" /><meta name="DC.identifier" content="configure-send-request" /><link rel="stylesheet" type="text/css" href="../../../CSS/commonltr.css" /><title>Review the inbound REST endpoint and configure inbound authentication</title></head><body id="configure-send-request"> <div class="breadcrumb"><a class="link" href="../../../administer/virtual-agent/concept/virtual-agent-landing-page.html" title="Unlock your enterprise productivity with ServiceNow Virtual Agent. Increase deflections by empowering your employees and customers to serve themselves using a friendly messaging interface, featuring pre-built conversations powered by artificial intelligence.">Virtual Agent</a> > <a class="link" href="../../../administer/virtual-agent/concept/using-virtual-agent.html" title="Convert the time your agents and technicians spend handling low-impact user requests into an intelligently managed interaction. Enable Virtual Agent with NLU to understand the intent of what people are looking for and provide them with more relevant answers.">Building and deploying Virtual Agent</a> > </div> <h1 class="title topictitle1" id="ariaid-title1">Review the inbound REST endpoint and configure inbound authentication</h1> <div class="body taskbody"><p class="shortdesc">After you install the <span class="ph">Virtual Agent</span> API, navigate to the Scripted REST API resource to review the endpoint and set up authentication.</p> <div class="section prereq p" id="configure-send-request__prereq_yz4_z52_rmb"> <p class="p">Role required: admin</p> </div> <ol class="ol steps" id="configure-send-request__steps_zz4_z52_rmb"><li class="li step stepexpand"> <span class="ph cmd">Navigate to <span class="ph menucascade"><span class="ph uicontrol">All</span> > <span class="ph uicontrol">System Web Services</span> > <span class="ph uicontrol">Scripted Web Services</span> > <span class="ph uicontrol">Scripted REST APIs</span></span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Select the <span class="ph uicontrol">VA Bot Integration</span> record to open it.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the <span class="ph uicontrol">Resources</span> tab, open the <span class="ph uicontrol">BOT Integration</span> record.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Review the inbound REST API resource details.</span> <div class="itemgroup info"> <p class="p">The format is: <span class="keyword apiname"> https://<customer instance>/api/sn_va_as_service/bot/integration</span></p> <div class="fig fignone" id="configure-send-request__fig_epp_jzr_fnb"> <img class="image" id="configure-send-request__image_fpp_jzr_fnb" src="../images/scripted-rest-api-endpoint.png" height="65" width="310" alt="Review the Resource path value for the REST endpoint." /> </div> <p class="p">For a description of the request parameters and an example send request, see <a class="xref" href="../integrate/inbound-rest/concept/bot-api.html" target="_blank" rel="noopener noreferrer">Virtual Agent Bot Integration API</a>.</p> </div> </li><li class="li step stepexpand"> <span class="ph cmd">In the <span class="ph uicontrol">Security</span> tab on the same page, select the <span class="ph uicontrol">Requires authentication</span> check box.</span> <div class="itemgroup info"> <div class="fig fignone" id="configure-send-request__fig_zfx_ths_fnb"> <img class="image" id="configure-send-request__image_agx_ths_fnb" src="../images/scripted-rest-api-botinteg.png" alt="Select the Requires authentication check box." /> </div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Set up Provider Authentication using any of these methods: Basic, OAuth, Hash, or Static Token. </span> <div class="itemgroup info"> <div class="note"><span class="notetitle">Note:</span> Guest usage via Basic or OAuth is already supported out-of-box when you select <span class="ph uicontrol">Requires authentication</span>. To support user account linking, you must use Static or Hash token-based authentication. You can use token-based authentication (Static or Hash) with or without Basic or OAuth authentication. The token can be passed in either the request body or the header. If the token is specified in both places, the one in the header is accepted.</div> <div class="p">Do one of the following:<ul class="ul" id="configure-send-request__ul_sb1_bxt_qmb"><li class="li">Set up Basic or OAuth authentication.<p class="p">To learn more about OAuth authentication and the possible security configurations for scripted REST APIs, see <a class="xref" href="../integrate/inbound-rest/task/t_EnableOAuthWithREST.html" target="_blank" rel="noopener noreferrer">Enable OAuth with inbound REST</a>.</p> </li><li class="li">Set up Message Authentication, which involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity. For details, see <a class="xref" href="set-up-message-auth-va-api.html" title="You can configure Message Authentication for the Virtual Agent API instead of Basic or OAuth. Message Authentication involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity.">Configure Message Authentication for inbound communication</a>.</li></ul> </div> </div> </li></ol> <div class="section postreq" id="configure-send-request__postreq_o3d_y1s_fnb">If you are using Message Authentication, <a class="xref" href="set-up-message-auth-va-api.html" title="You can configure Message Authentication for the Virtual Agent API instead of Basic or OAuth. Message Authentication involves configuring either Static or Hash tokens, setting up Provider Authentication, and setting the channel identity.">Configure Message Authentication for inbound communication</a>.<p class="p"><a class="xref" href="configure-response-endpoint-va-api.html" title="Specify the outbound endpoint URL to which the Virtual Agent responses are posted. Configure outbound authentication.">Configure the output response REST endpoint and outbound authentication for the Virtual Agent API</a>.</p> </div> </div> <div class="related-links"> <div class="familylinks"> <div class="parentlink"><strong>Parent Topic:</strong> <a class="link" href="../../../administer/virtual-agent/concept/virtual-agent-api.html" title="Use the ServiceNow Virtual Agent API app to integrate any chat interface or a bot with ServiceNow Virtual Agent or Agent Chat. The app is available from the ServiceNow Store.">Using Virtual Agent API</a></div> </div> </div></body></html></div>