Sign API and webhooks
Send documents from templates with your own software, embed signing, and be told the moment they are signed.
The API and webhooks come with the Business plan. Make keys in Settings > API & webhooks. A key acts as the person who made it.
Calls
Base address: https://www.ellibo.com/sign/api.php/v1/ with the header Authorization: Bearer sgk_.... JSON in and out.
| Call | What it does |
|---|---|
GET templates | Templates with their roles and fillable fields |
POST templates/{id}/send | Send from a template |
GET documents?status=&limit=&page= | Documents |
GET documents/{id} | One document with its recipients |
GET documents/{id}/signed.pdf | The signed PDF of a completed document |
POST documents/{id}/remind | Remind who it waits for |
POST documents/{id}/recall | Withdraw it: {"reason": "..."} |
Send from a template:
POST templates/12/send
{
"title": "Rental agreement - Flat 4B",
"recipients": [{"role": "Tenant", "name": "Ravi Kumar", "email": "ravi@example.com"}],
"prefill": {"Monthly rent": "18000"},
"no_email": false
}Each recipient in the reply has a signing_url. To show signing inside your own site, send with "no_email": true and open the link for the signer.
5,000 calls a day per key.
Webhooks
Add a web address and the events you want (or all): document.sent, recipient.viewed, recipient.signed, recipient.approved, document.completed, document.declined, document.expired, document.recalled. We POST JSON with the document and its recipients.
Check each call with the headers X-Ellibo-Timestamp and X-Ellibo-Signature: sha256= - an HMAC-SHA256 of timestamp + "." + body with the secret shown when you made the webhook. Failed calls are tried again after 1, 5, 30, 120 and 720 minutes. Test sends a sample call.