Quickstart
Your first call in five minutes.
Authentication
Personal tokens and scoped API keys.
Webhooks
Signed events for messages, conversations and contacts.
API reference
143 endpoints, each with a runnable panel.
What it does
The same data as the dashboard. Anything an agent or admin can see or change in HueChat can be read or changed here, with the same permissions. Two credentials. A personal access token carries your full role. A scoped API key (hc_…) carries only the scopes you grant, with its own rate limit,
IP allowlist and expiry. Use scoped keys for anything that ships.
Signed webhooks. Subscribe a URL to events and verify every delivery with
an HMAC-SHA256 signature.
One base URL.
What it does not do
- Sign-up, billing and plan changes stay in the dashboard.
- Cross-account access: a scoped key belongs to one account. Requests to another account are denied.
- Operator and platform surfaces are not exposed.