API Integration & Webhooks

The REST API lets you create and manage masked sessions, place masked click-to-call calls, manage extension codes, read call logs and fetch recordings. Authenticate with a Bearer API key from the masking portal. Event webhooks tell your system when a session is created, a call comes in, connects, ends or is missed, and when a session expires. Webhooks are signed with HMAC-SHA256 and sent once per event (5-second timeout, no retries), so reconcile with the call logs API. There are no SDK packages; any HTTP client works, and the docs show cURL examples for every call.