Account and status

The account itself, and three views of what is going on: right now, whether the plumbing is working, and everything in order.

Read the account

GET/v1/accountany key

Who you are to us: the plan, the caps, where alerts go, and a few switches.

Response

idstring: The account id. It appears on every webhook.
namestring: The company name.
plan"watch" | "guard" | "enterprise"
plan_statusstring | null: active, past_due, or null with no subscription.
numbers / number_limitinteger / integer | null: How many numbers are protected and the plan's cap; null when there is none.
alert_webhook_url / alert_sms_tostring | null: Where alerts go.
api_key_hintstring: The first and last characters of the account's original key, to tell keys apart.
has_subscriptionboolean
spam_thresholdinteger: Where a spam score starts counting as spam for you, 1 to 100. Colours the dashboard; changes no decision.
hangupboolean: On Guard, whether we end a call that crosses the line. On by default.
verified_phonesstring[]: Phones the account has proved with a code. Only these can receive texts and calls.
featuresobject: gate: whether the plan includes the gate and the live monitor.

RequestShell

BASE=https://api.murusai.com

curl "$BASE/v1/account" \
  -H "Authorization: Bearer $MURUSAI_KEY"

RequestNode

const BASE = "https://api.murusai.com";
const KEY = process.env.MURUSAI_KEY;

const url = new URL("/v1/account", BASE);
const res = await fetch(url, {
  headers: {
    Authorization: `Bearer ${KEY}`,
  },
});
const data = await res.json();

RequestPython

import os, requests

BASE = "https://api.murusai.com"
KEY = os.environ["MURUSAI_KEY"]

r = requests.get(
    f"{BASE}/v1/account",
    headers={"Authorization": f"Bearer {KEY}"},
)
data = r.json()

200OKResponseJSON

{
  "id": "6a1c0f2e-…",
  "name": "Northwind Dental",
  "plan": "guard",
  "plan_status": "active",
  "alert_webhook_url": "https://ops.northwind.example/murusai",
  "alert_sms_to": "+14155550177",
  "api_key_hint": "cw_live_4Qx9…sT2k",
  "has_subscription": true,
  "onboarded": true,
  "spam_threshold": 50,
  "hangup": true,
  "verified_phones": ["+14155550177"],
  "numbers": 4,
  "number_limit": null,
  "features": { "gate": true }
}

Send only what changes. Alert destinations and the name are the usual reasons; the two switches are for an admin. The response is the account as the read returns it, except when only the alert destinations changed, when it is those two fields.

Request body

alert_webhook_urlstring | null: Where alerts are posted. Must be https. null switches the webhook off. See webhooks.
alert_sms_tostring | null: The phone for text alerts. Must be one of verified_phones. Guard.
namestring: The company name, up to 120 characters. Admins.
spam_thresholdinteger: 1 to 100. Admins.
hangupboolean: Whether Guard ends calls. Admins.

Errors

webhook_must_be_https400: A URL that is not https.
invalid_sms_number400: A phone we could not parse.
phone_unverified403: A phone the account has not proved. The number is in the body.
invalid_spam_threshold400: Outside 1 to 100.
role_required403: A member changing something reserved for admins.

RequestShell

BASE=https://api.murusai.com

curl -X PATCH "$BASE/v1/account" \
  -H "Authorization: Bearer $MURUSAI_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "alert_webhook_url": "https://ops.northwind.example/murusai"
  }'

RequestNode

const BASE = "https://api.murusai.com";
const KEY = process.env.MURUSAI_KEY;

const url = new URL("/v1/account", BASE);
const res = await fetch(url, {
  method: "PATCH",
  headers: {
    Authorization: `Bearer ${KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    "alert_webhook_url": "https://ops.northwind.example/murusai"
  }),
});
const data = await res.json();

RequestPython

import os, requests

BASE = "https://api.murusai.com"
KEY = os.environ["MURUSAI_KEY"]

r = requests.patch(
    f"{BASE}/v1/account",
    headers={"Authorization": f"Bearer {KEY}"},
    json={
        "alert_webhook_url": "https://ops.northwind.example/murusai",
    },
)
data = r.json()

200OKResponseJSON

{
  "alert_webhook_url": "https://ops.northwind.example/murusai",
  "alert_sms_to": "+14155550177"
}

Right now

GET/v1/statusany key

What is happening this minute: calls that are open, the last hour on each number, the blocks in force, the twenty most recent alerts. One call, made for a wallboard.

Response

planstring
numbersinteger: Protected numbers.
open_callsobject[]: Each: call_id, number, caller, direction, started_at, open_s, score, action, and from the live monitor user_turns, agent_turns, interruptions, live_flags, live_score.
last_hourobject[]: Per number: calls, rejected, review.
blocksobject[]: As on blocks.
recent_alertsobject[]: The last twenty, oldest form: id, type, key, payload, created_at. For the full shape use alerts.

RequestShell

BASE=https://api.murusai.com

curl "$BASE/v1/status" \
  -H "Authorization: Bearer $MURUSAI_KEY"

RequestNode

const BASE = "https://api.murusai.com";
const KEY = process.env.MURUSAI_KEY;

const url = new URL("/v1/status", BASE);
const res = await fetch(url, {
  headers: {
    Authorization: `Bearer ${KEY}`,
  },
});
const data = await res.json();

RequestPython

import os, requests

BASE = "https://api.murusai.com"
KEY = os.environ["MURUSAI_KEY"]

r = requests.get(
    f"{BASE}/v1/status",
    headers={"Authorization": f"Bearer {KEY}"},
)
data = r.json()

200OKResponseJSON

{
  "plan": "guard",
  "numbers": 4,
  "open_calls": [
    {
      "call_id": "CA7f3e2a91c04b",
      "number": "+14155550100",
      "caller": "+15125550142",
      "direction": "inbound",
      "started_at": "2026-09-21T02:14:07.000Z",
      "open_s": 84,
      "score": 0.92,
      "action": "reject",
      "user_turns": 3,
      "agent_turns": 2,
      "interruptions": 0,
      "live_flags": ["recording_likely"],
      "live_score": 0.6
    }
  ],
  "last_hour": [
    { "number": "+14155550100", "calls": 31, "rejected": 7, "review": 2 }
  ],
  "blocks": [ { … } ],
  "recent_alerts": [ { … } ]
}

Is it working

GET/v1/healthany key

Not whether we are up, but whether your integration is. Are the platform connections importing, has one been failing and since when, did the last alerts actually land, and how much has arrived today.

Response

connectionsobject[]: Each platform connection: provider, label, status, last_error, last_polled_at, since_poll in seconds, imported in total, calls_24h, and failing, the open incident or null.
incidentsobject[]: The last twenty sync incidents: started_at, ended_at, attempts, last_error, seconds.
deliveriesobject[]: The last twenty alerts with delivered_webhook and delivered_sms. Empty until a channel is set.
channelsobject: webhook and sms: whether each is set.
callsobject: day, hour, open.
poll_interval_secinteger: How often connections are read. 60.

RequestShell

BASE=https://api.murusai.com

curl "$BASE/v1/health" \
  -H "Authorization: Bearer $MURUSAI_KEY"

RequestNode

const BASE = "https://api.murusai.com";
const KEY = process.env.MURUSAI_KEY;

const url = new URL("/v1/health", BASE);
const res = await fetch(url, {
  headers: {
    Authorization: `Bearer ${KEY}`,
  },
});
const data = await res.json();

RequestPython

import os, requests

BASE = "https://api.murusai.com"
KEY = os.environ["MURUSAI_KEY"]

r = requests.get(
    f"{BASE}/v1/health",
    headers={"Authorization": f"Bearer {KEY}"},
)
data = r.json()

200OKResponseJSON

{
  "connections": [
    {
      "id": "c3d9…",
      "provider": "vapi",
      "label": "Production",
      "status": "ok",
      "last_error": null,
      "last_polled_at": "2026-09-21T02:16:00.000Z",
      "since_poll": 41,
      "imported": 18422,
      "calls_24h": 612,
      "failing": null
    }
  ],
  "incidents": [],
  "deliveries": [
    {
      "id": "b1f2…",
      "type": "caller.rotating_numbers",
      "key": "+151255501",
      "created_at": "2026-09-21T02:14:08.000Z",
      "delivered_webhook": true,
      "delivered_sms": true
    }
  ],
  "channels": { "webhook": true, "sms": true },
  "calls": { "day": 640, "hour": 31, "open": 1 },
  "poll_interval_sec": 60
}

Everything, in order

GET/v1/activityany key

One feed, newest first: alerts, flagged calls grouped by caller and hour, gate challenges and how they went, blocks lifting, volume spikes opening and closing, imports failing and recovering, numbers and connections added. What the dashboard's Activity page draws.

Query parameters

limitintegerdefault 80: At most 300.

Response

eventsobject[]: Each: kind, at, subtype, key, data. The kinds and what data holds are below.

kind	subtype	data
`alert`	The alert type.	The alert's data.
`calls_flagged`	The worst action in the group.	caller, number, direction, count, reject, first, last, cost.
`gate`	pass, fail or timeout.	caller, number, attempt, input, latency_ms.
`block_lifted`	The block type.	pattern, violations, since.
`sync`	failing or recovered.	provider, label, started, ended, attempts, error.
`volume`	ongoing or ended.	number, started, ended, peak, expected, callers.
`number_added`	number	number, label.
`connection_added`	The provider.	provider, label, imported.

RequestShell

BASE=https://api.murusai.com

curl "$BASE/v1/activity" \
  -H "Authorization: Bearer $MURUSAI_KEY" \
  --get \
  --data-urlencode "limit=2"

RequestNode

const BASE = "https://api.murusai.com";
const KEY = process.env.MURUSAI_KEY;

const url = new URL("/v1/activity", BASE);
url.search = new URLSearchParams({
  "limit": "2"
});
const res = await fetch(url, {
  headers: {
    Authorization: `Bearer ${KEY}`,
  },
});
const data = await res.json();

RequestPython

import os, requests

BASE = "https://api.murusai.com"
KEY = os.environ["MURUSAI_KEY"]

r = requests.get(
    f"{BASE}/v1/activity",
    params={
        "limit": "2",
    },
    headers={"Authorization": f"Bearer {KEY}"},
)
data = r.json()

200OKResponseJSON

{
  "events": [
    {
      "kind": "alert",
      "at": "2026-09-21T02:14:08.000Z",
      "subtype": "caller.rotating_numbers",
      "key": "+151255501",
      "data": { … }
    },
    {
      "kind": "gate",
      "at": "2026-09-21T02:13:41.000Z",
      "subtype": "fail",
      "key": "CA7f3e2a91c04b",
      "data": {
        "caller": "+15125550142",
        "number": "+14155550100",
        "attempt": 2,
        "input": "dtmf",
        "latency_ms": 310
      }
    }
  ]
}

Keys, team members, invitations, the plan and deleting the account are the dashboard's: they need a signed-in person, not a key, and are not reachable from here on purpose.

Account and status

Read the account

Response

Update the account

Request body

Errors

Right now

Response

Is it working

Response

Everything, in order

Query parameters

Response