curl --request POST \
--url https://voice.growdental.ai/api/partner/v1/webhook-endpoints \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"url": "https://api.example-pms.com/growdental/webhooks",
"enabled_events": []
}
'import requests
url = "https://voice.growdental.ai/api/partner/v1/webhook-endpoints"
payload = {
"url": "https://api.example-pms.com/growdental/webhooks",
"enabled_events": []
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({url: 'https://api.example-pms.com/growdental/webhooks', enabled_events: []})
};
fetch('https://voice.growdental.ai/api/partner/v1/webhook-endpoints', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://voice.growdental.ai/api/partner/v1/webhook-endpoints",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'url' => 'https://api.example-pms.com/growdental/webhooks',
'enabled_events' => [
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://voice.growdental.ai/api/partner/v1/webhook-endpoints"
payload := strings.NewReader("{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://voice.growdental.ai/api/partner/v1/webhook-endpoints")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://voice.growdental.ai/api/partner/v1/webhook-endpoints")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}"
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"url": "<string>",
"enabled_events": [
"call.completed"
],
"status": "active",
"failure_count": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"secret": "<string>"
}Create a webhook endpoint
Registers an HTTPS endpoint to receive signed event deliveries.
Requires webhooks:manage. Apps may register at most 20 endpoints
(409 limit_exceeded beyond that).
The response includes the endpoint’s HMAC signing secret exactly
once — store it securely; it cannot be retrieved again (idempotent
replays of the create response deliberately omit it). To rotate a
secret, create a new endpoint, migrate, then delete the old one.
curl --request POST \
--url https://voice.growdental.ai/api/partner/v1/webhook-endpoints \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"url": "https://api.example-pms.com/growdental/webhooks",
"enabled_events": []
}
'import requests
url = "https://voice.growdental.ai/api/partner/v1/webhook-endpoints"
payload = {
"url": "https://api.example-pms.com/growdental/webhooks",
"enabled_events": []
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({url: 'https://api.example-pms.com/growdental/webhooks', enabled_events: []})
};
fetch('https://voice.growdental.ai/api/partner/v1/webhook-endpoints', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://voice.growdental.ai/api/partner/v1/webhook-endpoints",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'url' => 'https://api.example-pms.com/growdental/webhooks',
'enabled_events' => [
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://voice.growdental.ai/api/partner/v1/webhook-endpoints"
payload := strings.NewReader("{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://voice.growdental.ai/api/partner/v1/webhook-endpoints")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://voice.growdental.ai/api/partner/v1/webhook-endpoints")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"url\": \"https://api.example-pms.com/growdental/webhooks\",\n \"enabled_events\": []\n}"
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"url": "<string>",
"enabled_events": [
"call.completed"
],
"status": "active",
"failure_count": 123,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"secret": "<string>"
}Authorizations
Partner API key sent as a Bearer token:
Authorization: Bearer gd_live_...
Keys are issued by the GrowDental team (invite-only), shown once
at creation, and stored server-side only as a SHA-256 hash. Key format:
gd_live_ (or gd_test_) followed by a 43-character base62 secret
(~256 bits of entropy). To rotate, request a new key, deploy it, then
ask us to revoke the old one — both keys work during the overlap.
Headers
Client-generated unique key (e.g. a UUID) making the POST safely
retryable for 24 hours: retries with the same key and payload replay
the original response; the same key with a different payload is
rejected with 409 idempotency_conflict. Strongly recommended on
every POST — required in practice for call-request creation, where a
blind retry can dial patients twice.
255Body
HTTPS URL that will receive event deliveries. Must be publicly reachable.
500"https://api.example-pms.com/growdental/webhooks"
Event types to deliver to this endpoint.
1Event types deliverable to webhook endpoints. call_attempt.resolved
and appointment.booked are planned (Phase 2) — valid to subscribe to
now, but not yet emitted.
call.completed, call.recording.ready, call_request.completed, call_attempt.resolved, appointment.booked Response
Endpoint created. The secret is shown only in this response.
Returned only from endpoint creation — includes the one-time signing secret.
Event types deliverable to webhook endpoints. call_attempt.resolved
and appointment.booked are planned (Phase 2) — valid to subscribe to
now, but not yet emitted.
call.completed, call.recording.ready, call_request.completed, call_attempt.resolved, appointment.booked disabled endpoints receive no deliveries. Endpoints are
auto-disabled after sustained delivery failures; re-enable via
PATCH once your receiver is healthy.
active, disabled Consecutive failed deliveries; resets on success.
HMAC-SHA256 signing secret for this endpoint. Shown only in
this response — it is stored encrypted and cannot be
retrieved again. Use it to verify the X-GrowDental-Signature
header on every delivery.