Skip to main content
This operation describes the callback Phonovation sends to your endpoint. See Webhooks for signature verification and retry handling.

Headers

X-Signature
string

A tamper-check for the webhook request. Use your shared webhook secret to calculate an HMAC-SHA256 signature over the exact raw UTF-8 request body, then compare it with this header before trusting or processing the payload.

The value is sha256= followed by a 64-character lowercase hexadecimal digest. Phonovation omits the header when no webhook secret is configured.

Pattern: ^sha256=[0-9a-f]{64}$

Body

application/json

The current webhook payload containing an SMS delivery receipt (DLR).

The delivery update Phonovation sends to your webhook.

To
string
required

The recipient's normalized mobile number.

Example:

"353871234567"

From
string
required

The sender ID used for the campaign.

Example:

"Phonovation"

Status
string
required

The delivery status reported by the messaging gateway.

Treat this as an open-ended string, not a fixed enum. Phonovation preserves parsed alphabetic gateway stat: values and may fall back to raw gateway status text. Letter casing is not changed.

Maximum string length: 30
Examples:

"DELIVERED"

"UNDELIV"

"REJECTD"

ClientReference
string | null
required

Your original recipient ClientReference, or null if you did not supply one.

Maximum string length: 30
Example:

"cli-ref-123"

Response

Endpoint not found. Phonovation applies the webhook retry policy.