Frontline API
Machine-readable reference for the two Frontline integrations. The Outbound lead enrollment and Call completions and agreements guides remain the full contract, including retry rules and worked examples. This reference mirrors them so you can import the spec into your own tooling.
Outbound leads is an endpoint we host. You call it to enroll a lead for outbound calling and to stop those calls.
Call completions and signed agreements are webhooks. We send them to an endpoint you host. They appear under Webhooks in the sidebar.
Frontline was previously named Intake360. The rename did not change the product. The webhook payloads have since gained new fields; every change to them has been an addition, so existing fields keep their meaning.
Integration questions, credential rotation, and endpoint changes go through your Attorney Assistant account contact.
Authentication
- API Key: firmName
- API Key: hmacSignature
- API Key: apiKey
Your firm's name, exactly as we configured it. We use it to look up your secret. Must match Law_Firm_Name in the body.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | c-name |
HMAC-SHA256 signature of the raw request body, keyed with the shared secret we issued to your firm, encoded as lowercase hexadecimal. We recreate the signature from the bytes we received and reject any mismatch with HTTP 401. Sign the exact string you send; re-serializing the JSON after signing changes the bytes and invalidates the signature.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | x-auth-token |
Token we generate and issue to you. Sent on every webhook delivery by
default. If your endpoint needs a different scheme, we can instead send
the token in a header with a name you choose, as
Authorization: Bearer <token>, or as HTTP Basic credentials; ask your
account contact. Validate the credential on every incoming request and
reject any request that is missing it or presents the wrong value.
Rotation is on manual request through your account contact. For a few
minutes after a rotation, deliveries can still carry the old value.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | x-api-key |