api — developer panel

Keys, webhooks and docs

The API is the product; the dashboard is a client of it. Everything below is live: authenticate with your key, buy and manage numbers, and receive every SMS on your webhook — the only delivery channel, no polling.

API keys

Reference same envelope on every endpoint

Amounts are US dollars (0.75 = 75¢). Service names are case-insensitive when buying. Per-key scopes, spend caps and a sandbox mode are planned; today every key is live with full access.

Webhook events how your SMS arrives

Every delivery is a POST with header X-SMSRouter-Signature: t=<unix>,v1=<hmac> where v1 = HMAC-SHA256(secret, t + "." + raw body). Verify it — and that t is recent — before trusting the body. Reply 2xx within 5s or we retry: 1s, 5s, 30s, 5m, 1h.

Webhook the only way SMS is delivered

Endpoint URL

All events go to this URL — also for orders placed from this dashboard. Reply 2xx within 5s or we retry: 1s, 5s, 30s, 5m, 1h. Verify X-SMSRouter-Signature with the signing secret above before trusting the body.

Usage last 24h

Counted from your own orders, rentals and top-ups in this browser.