If the dashboard can do it, so can you.
Signed webhooks push every meaningful event to your own server on any plan, including the free one. The versioned REST API behind our Zapier app is yours to call as well, with an OpenAPI 3.1 spec and honest rate limits, on the Scale plan.
Read, write, and subscribe on your terms.
The REST API exposes conversations, leads, bookings, and knowledge sources, plus a 30-day analytics summary. Reads cover all of it; writes cover leads, conversation tags, and internal notes. Bearer keys carry the hs_live_ prefix and are hashed before they ever touch the database, and you get 1,000 requests an hour per key with rate-limit headers on every response.
For events you would rather not poll for, webhooks push, and they are not plan-gated. Point an endpoint at Hey Support and each of ten events arrives signed, retried, and logged: conversation started and ended, message sent, lead created, a booking created, rescheduled, or canceled, handoff requested and resolved, and an action awaiting approval.
A key for reads, an endpoint for events.
Mint an API key
Create an hs_live_ key in settings. It's shown once and hashed at rest; requests outside your workspace get a 404, not a 403, so nothing can be enumerated.
Call the API
Read conversations, leads, bookings, and knowledge sources, or pull an analytics summary. Write leads, tags, and internal notes. Offset pagination with a has_more flag, no cursor bookkeeping.
Add a webhook
Register an endpoint, pick your events, and copy the signing secret. Every delivery is signed with HMAC SHA-256.
Built for people who read the spec.
Versioned REST
Conversations, leads, bookings, knowledge sources, and a 30-day analytics summary, with an OpenAPI 3.1 spec to generate against. Included on the Scale plan.
Honest rate limits
1,000 requests an hour per key, with X-RateLimit headers on every response. No surprises.
Signed webhooks
Ten events, HMAC SHA-256 signatures, and secret rotation that keeps both signatures valid for 24 hours. On every plan, free included.
Delivers or tells you
Four attempts with backoff, a delivery log on every endpoint, and an email to the owner if a dead URL keeps failing.
API & webhooks questions, answered
Read conversations, leads, bookings, and knowledge sources, and pull a 30-day analytics summary. Writes cover leads, conversation tags, and internal notes. Knowledge sources are read-only. It is a versioned REST API with an OpenAPI 3.1 spec, authenticated with Bearer keys.
Put API & webhooks to work in your next conversation.
No credit card · Live in a day · Cancel any time