Webhooks

Register an endpoint in Settings → Webhooks and we POST events to it as they happen.

Events#

• call.started — a call has begun.
• call.ended — a call finished and has been metered.
• booking.created — your AI took an appointment on a call.
• call.transcript.ready — a finished call’s transcript is stored; read it with GET /api/v1/calls/{id}.
• message.taken — your AI took a message for you.
• call.urgent — your AI flagged a call as urgent.
• question.unanswered — a caller asked something your AI could not answer.
• credit.low — credits are low, gone, or your plan minutes are used up (state says which). At most once a day per state.
• plan.expiring — your plan is about to end.
• number.released — a number went back to the carrier after its plan lapsed.

Verifying a delivery#

Every request carries an x-signature header in the form t=<timestamp>,n=<nonce>,v1=<hmac>. The HMAC is SHA-256 over the canonical JSON of the payload, keyed with that endpoint’s own signing secret.

Verify by parsing the body, canonicalizing it, and recomputing — the byte order of the wire body deliberately does not matter, so a proxy that re-serializes your JSON cannot break verification.

Retries#

• Up to six attempts over roughly 34 hours, with exponential backoff.
• An endpoint that keeps failing is disabled automatically, and the console says so.
• Every attempt — successful or not — appears in the delivery log.
• Deduplicate on the event id: the same event can legitimately arrive twice.