Loading documentation...
Technical reference for all production webhook endpoints and cryptographic signature verification.
Operator provides dedicated, verified webhook endpoints for external services:
| Endpoint | Method | Provider | Description |
|---|---|---|---|
/api/webhooks/voice/inbound | POST | Twilio Voice | Inbound telephone call routing and TwiML instructions |
/api/webhooks/voice/stream | GET / POST | Media Stream | WebSocket audio streaming handshake |
/api/webhooks/voice/recording | POST | Twilio Voice | Completed call recording URL and transcription |
/api/webhooks/meta | GET | Meta Cloud API | Webhook challenge token verification |
/api/webhooks/meta | POST | Meta Cloud API | Inbound WhatsApp & Instagram messages |
/api/webhooks/billing/stripe | POST | Stripe | Subscription updates, invoices, and checkout events |
/api/webhooks/billing/razorpay | POST | Razorpay | Order payments, payment links, and subscriptions |
/api/webhooks/sinch | POST | Sinch SMS | Inbound SMS and delivery receipts |
/api/webhooks/vonage | POST | Vonage | Inbound voice and SMS callbacks |
POST /api/webhooks/voice/inboundx-twilio-signatureverifyTwilioSignature() with TWILIO_AUTH_TOKEN to guarantee requests originate from Twilio.<Response><Say>...</Say></Response>)./api/webhooks/metahub.mode === "subscribe" and verifies hub.verify_token against META_WEBHOOK_VERIFY_TOKEN. Returns the hub.challenge string.x-hub-signature-256 using META_APP_SECRET.