LeadlyIVR API

curl https://api.leadlyivr.com/v1/calls \
  -H "Authorization: Bearer lk_live_XXXXXXXXXXXX"

Authorization: Bearer lk_live_XXXXXXXXXXXX
# or
X-API-Key: lk_live_XXXXXXXXXXXX

curl -X POST https://api.leadlyivr.com/v1/calls \
  -H "Authorization: Bearer lk_live_XXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{ "to": "919812345678", "agentId": "<agent-uuid from GET /agents>" }'

# → 202 Accepted
# { "requestUuid": "f3a1c9e2-…", "message": "call fired" }
# The agent's phone rings first, then the customer is bridged in.
# Subscribe to call.started / call.completed webhooks to track progress;
# requestUuid matches call_uuid in those events and in GET /calls.

# 1. Once: list the assistants and remember the one you want.
curl https://api.leadlyivr.com/v1/ai-assistants -H "Authorization: Bearer lk_live_XXXXXXXXXXXX"
# → [{ "id": "…", "name": "Sales", "kind": "department", "flow": null }]

# 2. On every new lead, fire one call. Nobody has to click anything.
curl -X POST https://api.leadlyivr.com/v1/calls \
  -H "Authorization: Bearer lk_live_XXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{
    "to": "919812345678",
    "mode": "ai",
    "departmentId": "<id from step 1>",
    "greeting": "Hi Ravi! Thank you for filling the form on our website — I am calling from Acme about your enquiry.",
    "context": "Lead source: website form. Interested in: balcony pigeon net."
  }'

# → 202 { "requestUuid": "…", "mode": "ai", "assistant": "Sales" }
# We ring the customer directly — no agent is involved. When they answer, the
# assistant opens with your greeting (never "thank you for calling"), and
# `context` tells it why it called. The transcript, recording and a written
# summary arrive on the call.completed webhook (is_ai: true).
#
# Use "aiNodeId" instead of "departmentId" for a flow AI node.
# Both greeting and context are optional; without a greeting the assistant
# introduces itself with your business name.
# 402 = AI minutes exhausted (top up); 409 = that department has no AI
# instructions yet.

{
  "call_uuid": "f3a1c9e2-…",
  "direction": "inbound",
  "from_number": "919008413315",
  "to_number": "918065951644",
  "status": "completed",
  "digits_path": "1",
  "duration_seconds": 73,
  "recording_url": "https://…/recording.mp3",
  "started_at": "2026-07-05T08:45:09Z",
  "ended_at": "2026-07-05T08:46:22Z",
  "agent_name": "Priya",
  "department_name": "Sales",
  "is_ai": false,
  "ai_summary": null,
  "ai_transcript": null
}

const res = await fetch('https://api.leadlyivr.com/v1/calls?limit=50', {
  headers: { Authorization: `Bearer ${process.env.LEADLY_API_KEY}` },
});
const calls = await res.json();
for (const c of calls.filter((c) => c.is_ai && c.ai_summary)) {
  await crm.createNote({ phone: c.from_number, note: c.ai_summary });
}

curl -X POST https://api.leadlyivr.com/v1/dialer-token \
  -H "Authorization: Bearer lk_live_XXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{ "agentId": "<agent-uuid from GET /agents>" }'

# → { "token": "eyJ…", "agent": "Priya",
#     "embedUrl": "https://leadlyivr.com/softphone/embed?token=eyJ…",
#     "expiresInMinutes": 720 }

<iframe
  src="{embedUrl}&origin=https://your-crm.example.com"
  allow="microphone"
  style="width: 380px; height: 420px; border: 0; border-radius: 12px;"
></iframe>

// Click a phone number in your CRM → dial it in the widget:
iframe.contentWindow.postMessage(
  { type: 'leadly:dial', to: '919812345678' }, 'https://leadlyivr.com');
// Also accepted: leadly:answer, leadly:reject, leadly:hangup

// Pop your contact card when a call comes in:
window.addEventListener('message', (ev) => {
  if (ev.origin !== 'https://leadlyivr.com') return;
  if (ev.data.type === 'leadly:incoming') showContact(ev.data.from);
  // Other events: leadly:ready, leadly:registered, leadly:answered,
  //               leadly:ended, leadly:error
});
// The bridge only activates when the &origin= param matches your page's origin.

POST https://your-app.example.com/leadly-webhook
X-LeadlyIVR-Event: call.completed
X-LeadlyIVR-Signature: t=1751712000,v1=6f3a…

{
  "id": "evt_9f2c…",
  "event": "call.completed",
  "created_at": "2026-07-05T08:46:23Z",
  "tenant_id": "…",
  "data": {
    "call_uuid": "…",
    "from_number": "919008413315",   // also sent as "from" (legacy alias)
    "to_number": "918065951644",     // also sent as "to" (legacy alias)
    "direction": "inbound",
    "status": "completed",
    "agent_name": "Priya",          // null when no agent handled it
    "department_name": "Sales",     // null when the call never hit a department
    "digits_path": "1",
    "duration_seconds": 73,
    "recording_url": null,
    "is_ai": false,
    "ai_summary": null,              // set on AI-handled calls (call.completed)
    "started_at": "2026-07-23T08:45:09.000Z",
    "ended_at": "2026-07-23T08:46:22.000Z"
  }
}

const crypto = require('crypto');

function verify(rawBody, sigHeader, secret) {
  const { t, v1 } = Object.fromEntries(sigHeader.split(',').map((p) => p.split('=')));
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false; // stale
  const expected = crypto.createHmac('sha256', secret)
    .update(`${t}.${rawBody}`).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
}
// IMPORTANT: verify against the RAW request body, before any JSON parsing.