ElevenLabs Voice Cloning
Use this skill for voice cloning, text-to-speech, preview generation, and voice asset management. Treat voice samples and cloned voices as sensitive biometric data.
Core Workflow
- Confirm the user has explicit rights and consent to upload, clone, synthesize, and retain the voice.
- Keep ElevenLabs API keys server-side. Use a backend proxy or service for cloning, synthesis, previews, and voice management.
- Validate audio before upload or processing: type, size, duration, sample rate, loudness, speech presence, and tenant quota.
- Store source audio and generated speech in private storage with signed URLs, retention windows, and tenant isolation.
- Create a durable
voice_jobsrecord for clone and long synthesis requests; process through workers or queues. - Use idempotency keys for clone requests, preview generation, and synthesis retries.
- Store provider voice IDs, consent record IDs, input checksums, model/settings versions, and deletion state.
- Redact transcript text and file names from logs when they may contain personal data.
Brazilian Portuguese Defaults
Use these as starting values, then tune with real samples:
typescriptconst voiceSettings = { stability: 0.35, similarity_boost: 1.0, style: 0.0, use_speaker_boost: true };
Prefer 2 to 5 minutes of clean, natural speech with varied intonation. Reject samples with background music, other speakers, clipping, or unclear rights.
Current API Boundary
- Use the official
@elevenlabs/elevenlabs-jspackage or HTTP API from the server. The current TTS route isPOST https://api.elevenlabs.io/v1/text-to-speech/:voice_idwithmodel_idselected fromGET /v1/models. - Do not hardcode a removed v1 model. In particular,
eleven_monolingual_v1andeleven_multilingual_v1are deprecated and scheduled for removal on 2026-07-09; prefer a currently listed multilingual/Flash/Turbo model and verify availability at deploy time. - Capture provider request IDs and character-cost headers for support and cost accounting without logging voice content.
Consent and Safety
- Store consent actor, voice owner, allowed use, retention period, revocation path, source file checksum, and timestamp.
- Require a deletion workflow that removes local assets and provider-side voices when consent is revoked or retention expires.
- Add human review before publishing cloned voice output for customer-facing or paid workflows.
- Do not expose provider voice IDs in a way that allows cross-tenant access.
Verification
- Test clone success, invalid audio, missing consent, duplicate retry, synthesis timeout, provider failure, deletion, and signed URL expiry.
- Confirm browser bundles do not contain ElevenLabs secrets.
- Confirm revoked consent blocks queued synthesis and triggers cleanup.
Official References
- https://elevenlabs.io/docs/api-reference/introduction/
- https://elevenlabs.io/docs/api-reference/models/list
- https://elevenlabs.io/docs/api-reference/text-to-speech/convert
- https://elevenlabs.io/docs/changelog
Related Skills
skill-ai-orchestrationskill-manual-video-processingskill-live-processing


