Authentication

Every request is authenticated with an API key issued from the workspace panel, sent as `Authorization: Bearer sk_live_...`.

Each key carries its own configurable permission scope — a key can be limited to read-only access, to specific resources, or granted full read-write access, independent of any other key issued for the same workspace.

Keys are shown in full only once, at the moment they're created; after that, only their owner can see them again, and any key can be revoked immediately from the panel without affecting other keys.

Authorization: Bearer sk_live_...

Resources

Every resource in the underlying data model is available through the API:

WorkspaceGeneral configuration, default language, enabled channels.
ContactCreate, search, and look up the end customers who write in.
ConversationList, create, close, and reassign conversations.
MessageSend and read messages within a conversation.
DepartmentManage teams and their routing rules.
AgentManage human users, roles, and department membership.
AIAgentCreate and configure AI agents: instructions, knowledge base, callable tools.
KnowledgeSourceUpload and manage documents and URLs for RAG.
ChannelConfigure channels and their credentials.
WebhookSubscribe to outbound events, signed with HMAC.
APIKeyIssue and revoke keys.

Webhook events

Subscribe a `WebhookEndpoint` to any of these events; every delivery is signed with HMAC using the secret tied to that endpoint, so you can verify it came from us before you trust its contents:

conversation.createdA new conversation started on any channel.
conversation.assignedA conversation was assigned to a human agent or department.
conversation.resolvedA conversation was closed, by AI or by a human.
message.receivedA new inbound message arrived from a contact.
message.sentA message was sent to a contact, by AI or by an agent.
handoff.requestedThe AI's confidence dropped below the workspace's threshold and it requested a human.
ai_agent.tool_callAn AI agent invoked one of its configured tools, including tools you registered yourself.

Deliveries are retried on failure and are not guaranteed exactly-once — design your webhook handler to be idempotent. Full delivery and retry semantics are documented in the Developer API Terms.

Real-time streaming

For integrations that need to consume events live instead of, or in addition to, webhooks, every workspace exposes a WebSocket streaming endpoint:

wss://api.inteligenciaviva.com/v1/workspaces/{id}/stream

Rate limits and fair use

API access is subject to rate limits tied to your workspace's plan; a request over the limit is signaled with HTTP 429 and the current rate-limit headers, so you can implement backoff correctly. The exact limits and the fully binding terms of API use — including what you may and may not do with the data you retrieve — are set out in the Developer API Terms, linked from the Legal page.