Your organization. All users, bots, keys, and data are isolated per tenant.
Bot
A configured AI agent (WhatsApp, inbound/outbound call, IVR) with a system prompt and optional knowledge base.
Channel
The surface a bot runs on — WhatsApp or voice (telephony, WebRTC, or a direct WebSocket).
Conversation
A thread of messages between an end user and a bot on a channel.
API Key
A secret prefixed cm_ used for server-to-server auth, with scopes, domain locks, and per-key limits.
Permission
A service an API key may call — llm, stt, tts, search, image, or *. Enforced on the inference endpoints; default *.
Scope
A platform resource an API key may access — e.g. bots:read, conversations:write, knowledge:read, webhooks:write, whatsapp:write. Defaults to empty (no resource access).
Webhook
An HTTPS endpoint CallMissed calls on events; payloads are HMAC-SHA256 signed.
Idempotency-Key
A header that makes a mutating request safely retryable — replays return the original result.
