# Sinch Imported Numbers and Hosting Orders Callbacks API **Canonical:** https://apis.io/apis/sinch/sinch-imported-numbers-and-hosting-orders-callbacks-api/ **Provider:** Sinch — https://apis.io/providers/sinch/ **Base URL:** https://us.conversation.api.sinch.com **Documentation:** https://developers.sinch.com/docs/conversation/api-reference/conversation Sinch Imported Numbers and Hosting Orders Callbacks API is one of 101 APIs that [Sinch](https://apis.io/providers/sinch/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification and an AsyncAPI event-driven specification. This API exposes 73 JSON Schema definitions. Tagged areas include Imported Numbers and Hosting Orders Callbacks. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, an AsyncAPI specification, and 73 JSON Schemas. You can set up callback URLs to receive event notifications when your numbers are updated. When delivering events the order is not guaranteed (for example, a failed event scheduled for retry will not block other events that were queued). The client's callback handler must implement the state machine that can decide what to do with _unexpected_ events, for example, "old" events or invalid state transitions. In these cases the handler could use the API to GET the latest state for the resource. The callback handler is expected to "ingest" the event and respond with 200 OK. The domain-specific business logic and processes should be executed outside of the callback request, as internal asynchronous jobs. To use callbacks, add the following IP addresses to your allowlist: - 54.76.19.159 - 54.78.194.39 - 54.155.83.128 ### Secure Webhook Endpoints with HMAC Implementing HMAC (Hash-based Message Authentication Code) on your webhook endpoints will ensure the integrity of data, preventing tampering during transmission. An HMAC used in webhooks is a common approach in the industry and essentially it is just special code that can be used to check if a message hasn't been tampered with during the transmission. We recommend to configure an HMAC secret for your project using the [callback configuration](https://developers.sinch.com/docs/numbers/api-reference/imported-hosting/imported-numbers-and-hosting-orders-callbacks/updatecallbackconfiguration). Then, when sending the number events, the HTTP POST requests will include the header `X-Sinch-Signature` with the computed HMAC. **NOTE:** The HMAC secret is configured per project; if you are using the Numbers API with multiple projects, make sure you configure the HMAC secret in each project, and fetch it for either imported or purchased numbers from the dedicated endpoints. ### HMAC verification We recommend to verify the HMAC code received with every event in your event handler. When receiving a new event on your endpoint URL, compute the HMAC of the payload using the secret (configured [here](https://developers.sinch.com/docs/numbers/api-reference/imported-hosting/imported-numbers-and-hosting-orders-callbacks/updatecallbackconfiguration)) and compare it with one received in the `X-Sinch-Signature` header. **NOTE:** Compute the HMAC on the plain text value before parsing the JSON payload. ## Operations (2) | Method | Path | Summary | |---|---|---| | GET | `/v1/projects/{projectId}/callbackConfiguration` | Get callbacks configuration | | PATCH | `/v1/projects/{projectId}/callbackConfiguration` | Update callback configuration | ## Machine-readable artifacts (107) - **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/openapi/sinch-imported-numbers-and-hosting-orders-callbacks-api-openapi.yml - **Documentation** — https://developers.sinch.com/docs/conversation - **APIReference** — https://developers.sinch.com/docs/conversation/api-reference/template - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-v2-template-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-v2-list-translations-response-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-v2-list-templates-response-schema.json - **Documentation** — https://developers.sinch.com/docs/est - **APIReference** — https://developers.sinch.com/docs/est/api-reference/est - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-call-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-sip-trunk-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-sip-endpoint-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-ip-range-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-access-control-list-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-number-schema.json - **Documentation** — https://developers.sinch.com/docs/fax - **APIReference** — https://developers.sinch.com/docs/fax/api-reference/fax - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-fax-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-service-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-template-by-name-response-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-update-template-request-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-service-phone-number-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-cover-page-schema.json - **Documentation** — https://developers.sinch.com/docs/number-lookup-api-v2 - **APIReference** — https://developers.sinch.com/docs/number-lookup-api-v2/api-reference/number-lookup-v2 - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-number-lookup-response-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-number-lookup-request-schema.json - **Documentation** — https://developers.sinch.com/docs/numbers - **APIReference** — https://developers.sinch.com/docs/numbers/api-reference/imported-hosting - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-hosting-order-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-qualified-number-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-text-enable-numbers-request-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-hosting-order-number-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-imported-number-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-list-imported-numbers-response-schema.json - **APIReference** — https://developers.sinch.com/docs/numbers/api-reference/numbers - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-active-number-response-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-rent-any-number-request-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-validate-address-response-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-number-order-schema.json - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/sinch/refs/heads/main/json-schema/sinch-create-number-order-request-schema.json - …and 67 more, listed in full on the page. ## Other Sinch APIs (12) - [Sinch Conversation API](https://apis.io/apis/sinch/sinch-conversation-api/) - [Sinch Voice API](https://apis.io/apis/sinch/sinch-voice-api/) - [Sinch Brands API](https://apis.io/apis/sinch/sinch-brands-api/) - [Sinch MMS API](https://apis.io/apis/sinch/sinch-mms-api/) - [Sinch Batches API](https://apis.io/apis/sinch/sinch-batches-api/) - [Sinch Delivery Reports API](https://apis.io/apis/sinch/sinch-delivery-reports-api/) - [Sinch Inbounds API](https://apis.io/apis/sinch/sinch-inbounds-api/) - [Sinch Groups API](https://apis.io/apis/sinch/sinch-groups-api/) - [Sinch 10DLC Brand Registration API](https://apis.io/apis/sinch/sinch-10dlc-brand-registration-api/) - [Sinch 10DLC Campaign Registration API](https://apis.io/apis/sinch/sinch-10dlc-campaign-registration-api/) - [Sinch Access Control List API](https://apis.io/apis/sinch/sinch-access-control-list-api/) - [Sinch Access Control Lists API](https://apis.io/apis/sinch/sinch-access-control-lists-api/) ## Tags Imported Numbers and Hosting Orders Callbacks --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/sinch/sinch-imported-numbers-and-hosting-orders-callbacks-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/sinch/.