server/routes.ts (~5300 lines, 160+ endpoints). All protected routes require Authorization: Bearer <token> or a valid session cookie.
Auth
Users
Bots
Channels
Campaigns
Contacts
Integrations & Tools
Payments
Analytics / Dashboard
Admin
Incoming Webhooks
Outgoing Webhooks (user-defined)
Users can configure per-bot webhooks that fire during conversations:- Managed via
GET/POST /api/bots/:id/webhooks - Webhook endpoint:
POST /api/v1/webhookwith API token auth - Dynamic parameters can be passed in webhook payloads