Call events (webhook)

SendApp can notify your system when a call starts, ends, is passed to a person, or when the caller asks to be called back. Turn it on in Agenda → Webhook: pick the address and tick the Voice AI events. Every event arrives as a signed POST request, like the booking events.

Voice AI events arrive only if you ticked them: a webhook created before, or with no events chosen, keeps receiving bookings only.

The body is {event, occurred_at, account_ref, call, delivery_id}: call has the same fields as GET /api/voice/calls/{call_id}, without the transcript. account_ref identifies the account and is not a key: the body never contains your API key.

voice.call.ended is a snapshot of the call at the moment it ends: the AI summary and the category come later, so read them from GET /api/voice/calls/{call_id}. The callback status arrives with voice.callback.requested. Each event is sent only once per call.

Check the signature: the X-SendApp-Signature header is t=<timestamp>,v1=<HMAC-SHA256 of "timestamp.body"> with the webhook's secret key. Reply with a 2xx code: otherwise we retry after 1, 5 and 30 minutes.

Parameters

4 · 0 required

voice.call.started optional

A call started.

voice.call.ended optional

A call ended: with outcome, duration and summary.

voice.call.escalated optional

The AI passed the call to a person.

voice.callback.requested optional

The caller asks to be called back.

Need help with the integration? info@sendapp.live

Request

# Example of an event your server receives
POST /hooks/sendapp HTTP/1.1
Content-Type: application/json
X-SendApp-Event: voice.call.ended
X-SendApp-Delivery: 5d0c2a4e-7b1f-4c3a-9e2d-8f6a1b2c3d4e
X-SendApp-Signature: t=1793870101,v1=6f1d0c…

<?php
// Check the signature
$body = file_get_contents('php://input');
$secret = 'whsec_...';
parse_str(str_replace(',', '&', $_SERVER['HTTP_X_SENDAPP_SIGNATURE'] ?? ''), $sig);
$ok = isset($sig['t'], $sig['v1'])
    && abs(time() - (int) $sig['t']) < 300
    && hash_equals(hash_hmac('sha256', $sig['t'] . '.' . $body, $secret), $sig['v1']);
if (!$ok) { http_response_code(400); exit; }
$event = json_decode($body, true);
http_response_code(200);

// Check the signature (Node.js, Express)
const crypto = require('crypto');
app.post('/hooks/sendapp', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = Object.fromEntries(String(req.get('X-SendApp-Signature')).split(',').map(p => p.split('=')));
  const expected = crypto.createHmac('sha256', process.env.SENDAPP_SECRET)
    .update(sig.t + '.' + req.body).digest('hex');
  const a = Buffer.from(expected), b = Buffer.from(String(sig.v1 || ''));
  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) return res.sendStatus(400);
  const event = JSON.parse(req.body);
  res.sendStatus(200);
});

Response

{
  "event": "voice.call.ended",
  "occurred_at": "2026-11-05T09:15:01Z",
  "account_ref": "acct_9f3c2a7e5b1d4c6f",
  "call": {
    "call_id": "1789749582.1320",
    "direction": "in",
    "status": "answered",
    "from_number": "+393331234567",
    "to_number": "+390212345678",
    "assistant_id": "YOUR_ACCOUNT_TOKEN",
    "ai_handled": true,
    "ai_escalated": false,
    "started_at": "2026-11-05T09:12:04Z",
    "answered_at": "2026-11-05T09:12:06Z",
    "ended_at": "2026-11-05T09:15:01Z",
    "wait_seconds": 2,
    "talk_seconds": 175,
    "end_reason": "completed",
    "disposition": null,
    "disposition_note": null,
    "ai_summary": null,
    "summary": null,
    "category": null,
    "sentiment": null,
    "callback_status": null,
    "callback_at": null,
    "conversation_id": "9b2f4c1e-8a5d-4f7b-9c3e-1d2a3b4c5d6e",
    "has_voicemail": false,
    "voicemail_seconds": null,
    "recording_available": true,
    "recording_seconds": 173,
    "recording_expires_at": "2026-12-05T09:15:01Z"
  },
  "delivery_id": "5d0c2a4e-7b1f-4c3a-9e2d-8f6a1b2c3d4e"
}