Stop polling for calls.
Get pinged the moment one ends.

# The webhook gives you a call ID. One request returns the rest.
curl "https://platform-api.convirza.com/v3/conversations/calls/{id}?include=transcription,summary,scorecard,dni_data" \
  -H "Authorization: Bearer $CONVIRZA_TOKEN"

import express from 'express';
import crypto from 'node:crypto';

const app = express();
// The static parameter or custom header you configured on the webhook or
// subscription. Convirza does not sign payloads - this check is yours.
const EXPECTED_KEY = process.env.CONVIRZA_WEBHOOK_KEY;

app.post(
  '/webhooks/convirza',
  express.json(),
  (req, res) => {
    const received = req.header('X-My-Webhook-Key') ?? '';

    const valid =
      received.length === EXPECTED_KEY.length &&
      crypto.timingSafeEqual(Buffer.from(received), Buffer.from(EXPECTED_KEY));

    if (!valid) {
      return res.status(401).send('invalid key');
    }

    // Respond fast, then enqueue the work. Dedupe on the call ID.
    res.status(200).send('ok');
    enqueue(req.body);
  },
);

app.listen(3000);

import hmac
import os
from flask import Flask, request, abort

app = Flask(__name__)
# The static parameter or custom header you configured on the webhook or
# subscription. Convirza does not sign payloads - this check is yours.
EXPECTED_KEY = os.environ['CONVIRZA_WEBHOOK_KEY']

@app.post('/webhooks/convirza')
def convirza_webhook():
    received = request.headers.get('X-My-Webhook-Key', '')

    if not hmac.compare_digest(received, EXPECTED_KEY):
        abort(401, 'invalid key')

    # Respond fast, then enqueue the work. Dedupe on the call ID.
    enqueue(request.get_json())
    return ('ok', 200)

Can I get webhooks only for qualified calls?

Can the webhook include the transcript?

How should my receiver handle retries?

Are webhooks secured?