Webhooks

Subscribe to real-time events so your systems react the moment Cawly handles a call.

Events

• call.completed
• lead.qualified
• appointment.booked
• call.urgent_transfer
• audit.ready

Subscribing

Create a subscription in the dashboard under Developer → Webhooks, providing a URL and the events you want. Cawly returns a signing secret (whsec_...).

Verifying signatures

Each delivery includes a Cawly-Signature header:

Cawly-Signature: t=1700000000,v1=<hex-hmac-sha256>

Compute HMAC-SHA256(secret, "{t}.{body}") and compare to v1. Reject deliveries where the timestamp is older than 5 minutes. Cawly retries failed deliveries with backoff.