Missed Call Integration for a Custom CRM

Every missed call is POSTed as JSON within seconds. Full field reference is in the docs at /docs/missed-call; test your signature logic with the free webhook signature verifier.

{
  "event": "call.missed",
  "timestamp": "2026-10-20T10:42:13Z",
  "data": {
    "call_sid": "3f6c2a1e-8b4d-4c1a-9e2f-7d5b0a9c1e44",
    "from": "+919876543210",
    "to": "+918045678901",
    "direction": "inbound",
    "status": "missed",
    "phone_number_id": "b21d7e90-5c3a-4f8e-a6d2-91c4e0f37a15",
    "phone_number_name": "Diwali hoarding - Pune"
  }
}

Hash the raw body, compare in constant time, acknowledge fast and dedupe on call_sid.

// Node.js (Express): verify X-Edesy-Signature over the RAW body
const crypto = require("crypto");

app.post("/webhooks/missed-call", express.raw({ type: "application/json" }), (req, res) => {
  const header = req.get("X-Edesy-Signature") || "";
  const expected = "sha256=" +
    crypto.createHmac("sha256", process.env.EDESY_WEBHOOK_SECRET)
      .update(req.body)            // Buffer, not re-serialised JSON
      .digest("hex");
  const ok = header.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(header), Buffer.from(expected));
  if (!ok) return res.status(401).end();

  res.status(200).end();           // acknowledge fast (within 5 s)
  const event = JSON.parse(req.body.toString("utf8"));
  queueLead(event.data.call_sid, event.data.from); // dedupe on call_sid
});