Slokoto API

curl -X POST https://slokoto.com/api/v1/oauth/token \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "client_credentials",
    "client_id": "slk_ci_your_client_id",
    "client_secret": "slk_cs_your_client_secret"
  }'

{
  "data": {
    "access_token": "slk_at_...",
    "token_type": "Bearer",
    "expires_in": 3600,
    "scope": "leads.read leads.write"
  }
}

curl https://slokoto.com/api/v1/leads \
  -H "Authorization: Bearer slk_at_your_access_token"

const response = await fetch('https://slokoto.com/api/v1/leads', {
  headers: {
    'Authorization': 'Bearer slk_at_your_access_token',
  },
});
const { data, meta } = await response.json();

import requests

response = requests.get(
    'https://slokoto.com/api/v1/leads',
    headers={'Authorization': 'Bearer slk_at_your_access_token'},
)
data = response.json()

{
  "event": "lead.created",
  "created_at": "2026-03-19T14:30:00Z",
  "data": {
    "lead": {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "email": "john@acme.com",
      "name": "John Smith",
      "company": "Acme Corp",
      "status": "active",
      ...
    }
  }
}

const crypto = require('crypto');

function verifyWebhook(payload, signatureHeader, secret) {
  const parts = signatureHeader.split(',');
  const timestamp = parts.find(p => p.startsWith('t=')).slice(2);
  const signature = parts.find(p => p.startsWith('v1=')).slice(3);

  // Check timestamp is within 5 minutes
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) {
    throw new Error('Webhook timestamp too old');
  }

  // Compute expected signature
  const signedContent = timestamp + '.' + payload;
  const expected = crypto
    .createHmac('sha256', secret)
    .update(signedContent)
    .digest('hex');

  // Timing-safe comparison
  return crypto.timingSafeEqual(
    Buffer.from(signature, 'hex'),
    Buffer.from(expected, 'hex'),
  );
}

import hmac
import hashlib
import time

def verify_webhook(payload: str, signature_header: str, secret: str) -> bool:
    parts = dict(p.split('=', 1) for p in signature_header.split(','))
    timestamp = parts['t']
    signature = parts['v1']

    # Check timestamp tolerance
    if abs(time.time() - int(timestamp)) > 300:
        raise ValueError('Webhook timestamp too old')

    # Compute expected
    signed = f"{timestamp}.{payload}"
    expected = hmac.new(
        secret.encode(), signed.encode(), hashlib.sha256
    ).hexdigest()

    return hmac.compare_digest(signature, expected)

{
  "error": {
    "code": "not_found",
    "message": "Lead not found"
  }
}