> ## Documentation Index
> Fetch the complete documentation index at: https://docs.growdental.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Callrecordingready

> Sent when a call's audio recording has been processed and is available
via `GET /calls/{callId}/recording` (requires `recordings:read` + BAA).
The payload contains only IDs and API links — never a media URL.

Verify `X-GrowDental-Signature` before trusting the payload;
de-duplicate on `X-GrowDental-Delivery-Id`.




## OpenAPI

````yaml /openapi.yaml webhook call.recording.ready
openapi: 3.1.0
info:
  title: GrowDental Partner API
  version: '2026-07-04'
  summary: >-
    Programmatic access to GrowDental's voice-AI calling platform for dental
    practices.
  description: >
    The GrowDental Partner API lets platforms and practice-management systems

    integrate with GrowDental's voice-AI calling for dental practices: list the

    practices you have been granted, read call results, fetch recordings,

    trigger outbound calls, and receive signed webhook events.


    **Status: early access.** This specification is the published v1 contract.

    Where the deployed API and this document disagree during early access, the

    discrepancy is a bug — report it and we will reconcile.


    ### Access


    Access is **invite-only**. There is no self-serve signup: partner apps,

    API keys, and practice grants are issued by the GrowDental team. Contact

    [partners@growdental.ai](mailto:partners@growdental.ai) to get started.


    ### Conventions


    - All request and response bodies are JSON; property names are
    **snake_case**
      (`duration_seconds`, `next_cursor`, `enabled_events`).
    - Errors use one envelope everywhere: `{ "error": "<machine_code>",
    "message": "<human text>" }`.

    - Requests referencing practices your app has **not** been granted return
      `404` (never `403`), so practice identifiers cannot be probed.
    - `GET` endpoints never take request bodies; all filters are query
    parameters.

    - Pagination varies by resource: the calls list uses cursor pagination
      (`limit` + `cursor` in, `data` + `next_cursor` out); the call-requests
      list uses `limit` + `offset` with a `pagination` object; the practices
      list is unpaginated.
    - Every `POST` endpoint honors an `Idempotency-Key` header (24-hour replay
    window).

    - Timestamps are ISO 8601 / RFC 3339 UTC strings.


    ### Rate limits


    Per API key: **600 requests/minute** by default; bulk write endpoints

    (call-request creation) have a separate **60 requests/minute** budget.

    Limited requests receive `429 rate_limited` with a `Retry-After` header

    (seconds).


    ### PHI and the BAA gate


    Scopes that expose protected health information (`transcripts:read`,

    `recordings:read`, `intake:write`) are hard-gated in code: they return

    `403 baa_required` until a Business Associate Agreement is on file for

    your app. Webhook payloads are PHI-minimal by design (IDs, outcomes, and

    links); PHI travels only over authenticated API pulls.
  contact:
    name: GrowDental Partnerships
    email: partners@growdental.ai
    url: https://voice.growdental.ai
servers:
  - url: https://voice.growdental.ai/api/partner/v1
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Practices
    description: Practices your partner app has been granted access to.
  - name: Calls
    description: Completed and in-flight calls for granted practices.
  - name: Recordings
    description: Short-lived, signed access to call recordings (PHI — BAA required).
  - name: Call Requests
    description: Trigger outbound voice-AI calls to one or more contacts.
  - name: Webhook Endpoints
    description: Manage the HTTPS endpoints that receive signed event deliveries.
paths: {}
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: |
        Partner API key sent as a Bearer token:

        ```
        Authorization: Bearer gd_live_...
        ```

        Keys are issued by the GrowDental team (invite-only), shown **once**
        at creation, and stored server-side only as a SHA-256 hash. Key format:
        `gd_live_` (or `gd_test_`) followed by a 43-character base62 secret
        (~256 bits of entropy). To rotate, request a new key, deploy it, then
        ask us to revoke the old one — both keys work during the overlap.

````