Saperly

Delete a connection. (DELETE https://api.saperly.com/connections/{id})

List calls. (GET https://api.saperly.com/calls)

Get a call by id. (GET https://api.saperly.com/calls/{id})

Get a call recording (302 redirect to a download URL). Saperly answers this with a 302 to a time-limited download URL rather than with audio. This integration does not stream the media through the gateway: it follows the redirect and returns a JSON descriptor naming the resolved `url`, `contentType` and `contentLength`, so fetch the recording from that URL. (GET https://api.saperly.com/calls/{id}/recording)

Get a call transcript. (GET https://api.saperly.com/calls/{id}/transcript)

List all connections in the workspace. (GET https://api.saperly.com/connections)

Get a connection by id. (GET https://api.saperly.com/connections/{id})

List all consent records in the workspace. (GET https://api.saperly.com/consent)

Check whether a contact has active consent. (GET https://api.saperly.com/consent/check)

Liveness probe. NEEDS NO CREDENTIAL: measured 2026-09-16, this route answers 200 {"status":"ok"} with no Authorization header at all. It proves the Saperly API is reachable, NOT that this connection's key is valid -- call any other tool for that. (GET https://api.saperly.com/health)

List the supported spoken languages. (GET https://api.saperly.com/languages)

List messages (optionally filtered by number). (GET https://api.saperly.com/messages)

List all phone numbers in the workspace. (GET https://api.saperly.com/numbers)

Get a phone number by id. (GET https://api.saperly.com/numbers/{id})

Quote the price of a phone number. (GET https://api.saperly.com/pricing/quote)

Get a usage summary (optionally since a timestamp). (GET https://api.saperly.com/usage)

List available voices (optionally filtered by language). (GET https://api.saperly.com/voices)

List the workspace audit-log events. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (GET https://api.saperly.com/workspaces/{slug}/audit-events)

List the workspace members. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (GET https://api.saperly.com/workspaces/{slug}/members)

List the workspace webhook endpoints. Returns every webhook endpoint for the workspace, each including its full `signingSecret` (`whsec_…`) — the reveal surface, so the secret can be re-copied at any time to verify delivery signatures. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". SIGNING SECRETS ARE REDACTED: each endpoint's `signingSecret` is replaced with a placeholder by this integration before the response reaches you -- a webhook signing secret can forge deliveries your system would accept as genuine, and a tool answer is replayed into transcripts and logs. Every other field is the provider's own. Read the real secret in Saperly: Settings > Webhooks. (GET https://api.saperly.com/workspaces/{slug}/webhooks)

List a webhook endpoint's recent delivery attempts. Returns the endpoint's most recent delivery attempts (newest first), each with the event type, outcome (`delivered`/`failed`), HTTP `responseStatus`, attempt number, and timestamps — so you can see exactly why a delivery did or didn't land (e.g. a run of `failed` with `responseStatus: 530` means your receiver is unreachable). `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (GET https://api.saperly.com/workspaces/{slug}/webhooks/{webhookId}/deliveries)

Update a connection (re-syncs the carrier). (PATCH https://api.saperly.com/connections/{id})

Mint a scoped API key. (POST https://api.saperly.com/api-tokens)

Revoke an API key. (POST https://api.saperly.com/api-tokens/{id}/revoke)

Ask the workspace assistant a question. (POST https://api.saperly.com/assistant/answer)

Place an outbound call. (POST https://api.saperly.com/calls)

End a live call. (POST https://api.saperly.com/calls/{id}/end)

Blind-transfer a live call. (POST https://api.saperly.com/calls/{id}/transfer)

Create a connection (provisions inline). (POST https://api.saperly.com/connections)

Record consent for a contact. (POST https://api.saperly.com/consent)

Revoke consent for a contact. (POST https://api.saperly.com/consent/revoke)

Send an SMS message. (POST https://api.saperly.com/messages)

Provision a phone number. (POST https://api.saperly.com/numbers)

Set the outbound caller ID name (CNAM). (POST https://api.saperly.com/numbers/{id}/caller-id)

Bind a connection to a number. (POST https://api.saperly.com/numbers/{id}/connection)

Release a phone number. (POST https://api.saperly.com/numbers/{id}/release)

Set the alphanumeric SMS sender id. (POST https://api.saperly.com/numbers/{id}/sms-sender)

Set a number's manual-mode brain URL. Sets the per-number manual-mode conversation-brain URL (a fallback for the connection's `manualWebhookUrl`). NOT an event-notification webhook — to receive call/SMS events, register a workspace webhook endpoint via `POST /workspaces/:slug/webhooks`. (POST https://api.saperly.com/numbers/{id}/webhook)

Create a scoped API token. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (POST https://api.saperly.com/workspaces/{slug}/api-tokens)

Revoke an API token. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (POST https://api.saperly.com/workspaces/{slug}/api-tokens/{tokenId}/revoke)

Invite a member by email. `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". (POST https://api.saperly.com/workspaces/{slug}/invitations)

Create a webhook endpoint. Registers an outbound webhook endpoint and returns it with its full `signingSecret`. Use the secret to verify each delivery’s `x-saperly-signature: v1=<hex>` header (HMAC-SHA256 over `${x-saperly-timestamp}.${rawBody}`). `slug` must be the workspace this connection's key belongs to: measured 2026-09-16, the key reaches these routes, and any OTHER slug answers 403 {"_tag":"AuthorizationDenied","reason":"token is not scoped to this workspace"} -- a distinct reason from the bogus-key "invalid_or_insufficient_token". SIGNING SECRET IS REDACTED: Saperly returns the new endpoint's `signingSecret` here and this integration replaces it with a placeholder, for the reason above. The webhook IS created and every other field is real; read its secret in Saperly: Settings > Webhooks. (POST https://api.saperly.com/workspaces/{slug}/webhooks)