API and webhooks
Send inquiries to Telenoa from your own system, and have new inquiries passed on to your CRM.
This page is for whoever sets up your own system — for example a webshop, a CRM or an automation tool like Zapier or Make. There are two directions:
- API — your system sends inquiries into Telenoa.
- Webhook — Telenoa sends new inquiries out to your system.
Does your system also need to read, update or reply to inquiries, contacts and calls? Use the API with API keys.
Send inquiries in (API)
Go to Opsætning → Kilder ("Setup → Sources"), click Ny kilde ("New source"), and choose API.
Give the key a name, for example "Webshop". Optionally fill in Tilladte domæner ("Allowed domains"). Click Opret nøgle ("Create key").
Copy the URL. The key is part of the URL.
Every form has a key too. You find it in the menu next to the source: Kopiér API-nøgle ("Copy API key").
Send a POST with JSON to the URL:
curl -X POST https://app.telenoa.com/api/v1/submit/<key> \
-H "Content-Type: application/json" \
-d '{"name":"Anna Jensen","email":"anna@firma.dk","subject":"Quote","message":"Hi …"}'- The fields
name,email,phone,subjectandmessageare recognised. Anything else is saved as custom fields. - There must be at least an
emailor amessage. - The response is
{"success": true, "id": "…"}. - Form data (
application/x-www-form-urlencoded) works too.
The key is in the URL. Keep it on your server, and never put it in code the browser can see.
Allowed domains
If you enter allowed domains, calls from other websites are rejected. Calls from a server without an Origin header are always allowed.
Empty means anyone can send.
Limits
- 60 calls per minute per key, and 20 per minute per IP address.
- At most 5 inquiries in 5 minutes from the same email address.
- At most 100 KB per call and 10,000 characters in the message.
If a limit is hit, Telenoa responds with HTTP 429. A key that is paused or deleted gives HTTP 401.
Send new inquiries out (webhook)
Webhooks require Pro, Business or Enterprise.
Go to Opsætning → Kategorier → Regler ("Setup → Categories → Rules") and find Send nye henvendelser til jeres eget system ("Send new inquiries to your own system") under Altid ("Always").
Enter the Adresse ("URL" — it must start with https:// or http://) and, optionally, a Hemmelighed ("Secret").
Click Slå til ("Turn on").
Every new inquiry is sent as JSON, whether it came from a form, a widget, the API, an email or a call to Noa Voice. Email that lands in Spam isn't sent:
{
"event": "inquiry.created",
"inquiry": {
"id": "…",
"org_id": "…",
"api_id": "…",
"category_id": null,
"status": "active",
"priority": "medium",
"owner_user_id": null,
"team_id": null,
"contact_email": "anna@firma.dk",
"created_at": "2026-09-29T10:00:00.000Z"
}
}Inquiries from email and calls also have the field channel (mail or phone), and api_id points to the Email or Telefon ("Phone") source.
Check that it's really us
If you've entered a secret, Telenoa sends the header x-telenoa-signature. It's an HMAC-SHA256 of the full JSON body with the secret as the key, written as hex.
The same value is also sent in the old header x-sentreo-signature, so existing receivers keep working.
Calculate the same value on your side, and reject calls where it doesn't match.
Deliveries
Under the setting you see the latest deliveries: Leveret ("Delivered"), Venter ("Pending") or Fejlede ("Failed"). If your URL doesn't respond with a 2xx, Telenoa tries again — up to 5 attempts in total.
If you downgrade to Essential, the URL is kept, but nothing is sent until you upgrade again.
See also
- Webhooks — more events, signed per Standard Webhooks
- Sources
- Categories and rules
- Plan and usage