API Reference
Use this section when you need exact request fields, response fields, validation rules, and webhook payload shapes.
Public Endpoints
Webhook Payloads
The reference also includes the signed phone-system outcome webhook payload your backend receives when Sailor sends an outcome action event. Verify the raw body with the versioned whsec_… secret and deduplicate by X-Sailor-Delivery-Id.
Before You Call The API
- Use
https://api.sailorhq.ioas the base URL. - Send
Authorization: Bearer $SAILOR_API_TOKEN. - Send an 8–255 character
Idempotency-Keyfor create and update requests; it is optional but recommended for delete. - Keep tokens server-side.
- Expect RFC 9457
application/problem+jsonerrors and preserveX-Request-Idin logs. - Honor
Retry-After,RateLimit-Policy, andRateLimit; see Rate limits.