PHP SDK webhooks

Telnyx signs every webhook delivery with an ED25519 signature carried in the telnyx-signature-ed25519 and telnyx-timestamp request headers. The SDK’s webhook service verifies the signature against your account’s public key and parses the payload into a typed event. Copy your public key from the Mission Control Portal and expose it as TELNYX_PUBLIC_KEY — the client reads it automatically, the same way it reads TELNYX_API_KEY:

export TELNYX_PUBLIC_KEY="..."

Verify and parse an event

Pass the raw request body and the request headers to $client->webhooks->unwrap():

<?php

require 'vendor/autoload.php';

use Telnyx\Client;
use Telnyx\Core\Exceptions\WebhookException;

$client = new Client(); // reads TELNYX_API_KEY and TELNYX_PUBLIC_KEY

$body = file_get_contents('php://input');

try {
    $event = $client->webhooks->unwrap($body, getallheaders());
} catch (WebhookException $e) {
    http_response_code(400); // signature invalid or payload malformed
    exit;
}

http_response_code(200);

unwrap() throws WebhookException when the signature does not match or the payload cannot be parsed, and returns the event as a typed union of every webhook event the API sends.

Skipping verification

$client->webhooks->unsafeUnwrap($body) parses a payload without checking the signature. Only use it for payloads you have already verified by other means, or in tests.

Receiving webhooks covers delivery, retries, and failover URLs.
Errors and retries covers the SDK’s exception classes.

⌘I

Account setup

APIs fundamentals

Server-side SDKs

Telnyx CLI

Development Tools

Migration Guides

Glossary

For AI Agents

PHP SDK webhooks

Verify and parse an event

Skipping verification

​Verify and parse an event

​Skipping verification

​Related

Verify and parse an event

Skipping verification

Related