REST endpoints
Embage exposes a REST API over HTTPS to list and read conversations, query AI Form records, write or update records, and manage knowledge sources. All endpoints are scoped to the organisation that owns the API key.
Authentication
Call every endpoint with a Bearer token in the Authorization header. API keys are created per organisation from the dashboard, scoped to a role, and can be revoked at any time without touching your agents.
Webhooks for real-time events
Subscribe to events — conversation.ended, handoff.requested, form.record.created, review.completed — and Embage posts a signed payload to your endpoint. Verify the signature with the webhook secret before processing.
Rate limits and retries
The API has per-key rate limits appropriate for CRM syncs and dashboards. Webhook delivery retries with exponential backoff on non-2xx responses and surfaces delivery status in the dashboard.
// Fetch recent AI Form records
curl -X GET "https://api.embage.com/v1/ai-forms/leads/records" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json"Related docs