Skip to main content
The Sotto API lets you manage users, send messages, upload media, subscribe to event webhooks, and read the segments and custom data fields configured for your brand. For high-volume data movement, Sotto also supports flat-file bulk imports and exports.

Authenticate

Sign every request with HMAC-SHA256.

API Reference

Explore every endpoint, schema, and example.

Webhooks

Receive callbacks when events happen in Sotto.

Bulk data

Import and export users, purchases, and click data.

​
Base URL

All API requests are made to:
Requests must be made over HTTPS. All request and response bodies are JSON unless otherwise noted (the Files endpoint accepts multipart/form-data).

​
Conventions

​
string
Timestamps are ISO 8601 in UTC, e.g. 2024-05-15T10:30:00Z. Dates of birth use MM/DD/YYYY.
​
string
Phone numbers use E.164 format, e.g. +15551234567.
​
integer | string
Users and messages are identified by integer IDs. Files and webhooks are identified by UUIDs.

​
Getting access

API credentials are provisioned by Sotto. You will receive a username and a secret that are used to sign requests. Reach out to support@withsotto.com to request credentials or ask a question.
Keep your API secret confidential. It is used to generate request signatures and should never be exposed in client-side code.