AI Chat AssistantDevelopers
AI Chatbot Webhooks & API Tokens
Receive signed bot events and read bots, sessions, messages, exports, and leads through the developer API.
In the app→Bot → Webhooks and AI Chat Assistant → API Tokens
Bot webhooks
A bot webhook receives POST events for leads, messages, and escalations. Verify X-K2Chat-Signature with the displayed secret using HMAC-SHA256.
The Delivery Log records event, HTTP status, destination URL, and fired time so failed integrations can be diagnosed.
Developer API
- Create and revoke personal API tokens.
- Assign only the required bots:read, conversations:read, and leads:read permissions.
- List accessible bots with a token that has bots:read.
- List sessions, read messages, or export a conversation with conversations:read.
- List captured leads with leads:read.
- Use the complete endpoint reference at k2mailer.com/help/api for paths, pagination, examples, and responses.
Treat tokens and webhook secrets as credentials
Store them in server-side secret management and rotate or revoke them if exposed.
Developer reference
Open the complete API reference
Review authentication, parameters, rate limits, cURL requests, and example responses.
Was this guide enough?
Contact support if your screen or result is different.