#AiDial API Reference

• Production API: https://api.aidial.ai
• Version prefix: /v1

This reference documents public endpoints and approved customer/partner API surfaces. Internal operations, host names, route mappings, storage layout, and deployment details are deliberately excluded.

#Getting Started

• Authentication - API key and bearer authentication, credential precedence, and security guidance
• Partner Integrations - partner identity, API keys, webhooks, catalogs, and capacity
• Error Responses - error formats and status code reference
• Rate Limiting - handling 429 responses and retry strategy

#Endpoint Groups

Protected routes use the authentication mode shown on each endpoint page. Partner server-to-server integrations normally use X-API-Key; customer or partner portal flows may use Authorization: Bearer <jwt> only when the page explicitly says so.

#Partner Integrations

Identity, API-key lifecycle, webhook registration, model/voice catalogs, and capacity monitoring for approved partner integrations.

#Calls Analytics

Call summaries, lists, timeline metrics, call detail, transcript download, and CSV export for authenticated tenant scopes.

#Projects

Project lifecycle, assignments, controlled release operations, safe project-secret metadata, and legacy project billing helpers for authorised scopes.

#Outbound Campaigns

Outbound campaign CRUD, contact import, compliance validation, registry-wash records, and safe outbound-evidence summaries.

#Compliance Caller Requests

Masked caller access/deletion workflow rows, open-count badges, and lifecycle status transitions.

#Billing

Customer billing overview, invoice history, invoice recipient masking/unmasking, invoice PDF download, and billing portal sessions.

#Health & Status

Public availability endpoints for GET / and GET /v1/health.

#Data Scoping

Protected API responses are scoped to the authenticated context. Cross-client data is never returned. Out-of-scope resources return 404 Not Found to avoid tenant enumeration. Missing or invalid authentication returns 401 Unauthorized. If a required backend dependency is unavailable, the API returns 503 Service Unavailable.

PII-sensitive responses respect customer privacy settings and fail closed by redacting or omitting protected fields when access cannot be verified. Raw encrypted values, signing secrets, API keys, bearer tokens, and plaintext secret values are not partner response fields.

#Endpoint Coverage

This table is generated from docs/dev/endpoint-visibility.yaml. Mounted routes classified as internal are intentionally excluded from this public table until they have a reviewed reference page.