Build with the Embott API.
REST. Webhooks. SDKs.

One platform, three building blocks.

Whether you're stitching Embott into an existing product or building a custom integration on top, you only need to know three primitives.

REST API

Base URL: https://api.embott.com/v1. All requests require Authorization: Bearer <your_api_key>.

# Send a message to an Embott conversation
curl https://api.embott.com/v1/conversations/conv_abc123/messages \
  -H "Authorization: Bearer $EMBOTT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "role": "user",
    "content": "Do you ship internationally?"
  }'

import { Embott } from "embott";

const client = new Embott({ apiKey: process.env.EMBOTT_API_KEY });

const reply = await client.conversations.sendMessage({
  conversationId: "conv_abc123",
  role: "user",
  content: "Do you ship internationally?",
});

console.log(reply.message.content);

from embott import Embott

client = Embott(api_key=os.environ["EMBOTT_API_KEY"])

reply = client.conversations.send_message(
    conversation_id="conv_abc123",
    role="user",
    content="Do you ship internationally?",
)

print(reply.message.content)

<?php
use Embott\Client;

$client = new Client(getenv('EMBOTT_API_KEY'));

$reply = $client->conversations->sendMessage([
    'conversation_id' => 'conv_abc123',
    'role'            => 'user',
    'content'         => 'Do you ship internationally?',
]);

echo $reply->message->content;

Resources

Webhooks

Subscribe once, get notified on every important event. Payloads are JSON, signed with HMAC-SHA256 using your endpoint secret. Embott auto-retries failed deliveries 9 times over 24 hours.

Verifying signatures (Node.js)

import crypto from "node:crypto";

function verify(rawBody, header, secret) {
  const [t, sig] = header.split(",").map(p => p.split("=")[1]);
  const expected = crypto.createHmac("sha256", secret)
    .update(`${t}.${rawBody}`)
    .digest("hex");
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(sig));
}

Official SDKs

Type-safe, idiomatic, and maintained in lockstep with the REST API. Each SDK ships with retry, pagination, and webhook signature helpers built in.

JavaScript / TS

npm install embott

Python

pip install embott

PHP

composer require embott/embott

Ruby

gem install embott

Authentication

Two-tier credentials. Public test keys (pk_test_*) for sandbox. Secret live keys (sk_live_*) for production. Rotate any time without redeploying.