Hudhud
HUDHUD FOR DEVELOPERS

A programmable interface into the Hudhud operating system.

Hudhud doesn't ask your business to rebuild around it. It exposes programmable surfaces for data, events, actions, integrations, and automation - so your systems and Hudhud stay in sync.

Connect. Observe. Decide. Act. Sync. Verify.

That's the shape of every real integration with Hudhud - not a one-way data dump, a two-way operating relationship.

Connect
Observe
Decide
Act
Sync
Verify
Developer Integration Lab

Select an integration objective. Watch the flow update.

One selection drives the request/webhook direction, the integration topology, and the action pipeline below it.

Illustrative integration flow - not a live request

API Request Journey

Every request and every inbound event passes through the same shape - verified before it's trusted.

Outbound request
Your System
Authentication
Hudhud API
Business Logic
Response
ValidatedAuthorizedProcessedRejected
Webhook Event Journey

Webhooks are event delivery - not a guarantee that a business process completed.

Hudhud Event
Event Envelope
Webhook Delivery
Customer Endpoint
Acknowledgement
Retry / Recovery Where Safe

An event is durably recorded and signature-verified before delivery is ever attempted - and delivery is at-least-once, never a claim of impossible exact-once.

Event Envelope Explorer

The conceptual shape of an event - not a frozen public schema.

Event Type
purchase_completed
customer qualifiedpurchase completedcustomer lostcustomer recoveredfollow-up createdopportunity closedhigh intent detected

CONCEPTUAL EVENT ENVELOPE - illustrative shape, not a frozen public contract

Integration Topology
HUDHUDCRMERPCommCataCustMessAnalInte

Hudhud at the center, connected to the system classes your business already runs. Select a node to see what flows in and out.

CRM
↓ in
Customer records and account context
↑ out
Qualified leads, conversation outcomes, opportunity signals
Action Pipeline

A developer-triggered action passes through the same governed sequence as every AI-driven decision.

Request
Validate
Authorize
Decide
Execute
Observe
Return Result
Customer UpdateWorkflow TriggerOrder ActionConversation ActionCustom Integration Action
Webhook Delivery State Machine

Delivery has a known path when things go well, and an explicit path when they don't.

Queued
Delivering
Acknowledged
Unknown
Retry If Safe
Reconcile / Escalate

Conceptual state labels - the exact production state names are not part of the public contract.

Integration Health Panel

What an integration's health looks like at a glance - not a live dashboard.

Authentication
Valid
Delivery
Healthy
Latency Class
Normal
Last Event
Recently delivered
Failure State
None
Recovery State
N/A

ILLUSTRATIVE INTEGRATION HEALTH - not live data

Programmable Workflow Canvas

How a conversation becomes a governed action - illustrated as a model, not a screenshot of a visual builder.

1
Customer Message
2
Intent Detected
3
Business Rule
4
API Lookup
5
Decision
6
Action
7
Webhook Outcome

PROGRAMMABLE WORKFLOW MODEL - illustrative, not a drag-and-drop builder screenshot

APIs

What you can build on

A REST API over HTTPS, covering the same resource families the Hudhud application itself is built on.

Customers and customer context
Conversations and conversation actions
Commerce - orders, catalog, inventory
Automation - workflows and triggers
Analytics and outcome data
Intelligence - decisions and evidence
Integrations - CRM and commerce connections
Authentication

Bearer-token authentication, server-verified

Requests are authenticated with a bearer token; tenant identity is derived server-side and never inferred from client-supplied input.

Bearer-token authentication on every request
Tenant context derived server-side, never client-asserted
Credentials held and used server-side only
Provisioning and credential lifecycle are handled during onboarding, not self-serve today
Webhooks

Event subscriptions, delivered and verified

Outbound platform events follow the same trust discipline as inbound provider events.

Event subscriptions configured during integration setup
Signed delivery, verified before being trusted
Acknowledgement required to close the delivery loop
Retry and recovery behavior for safe cases
Idempotency expected on the receiving end - see below
Idempotency

Same event, same identity, one intended effect

A duplicate delivery of the same business event should never become a duplicate business effect on your side either.

Same business event arrives again
Same event identity is recognized
One business effect is intended, not two

This describes intended behavior, not a claim of literal exactly-once delivery across the network - build your own idempotency check keyed on the event identity.

Error Model

Errors are categorized, not just failed

Knowing why a request failed is what makes an integration debuggable.

ValidationAuthenticationAuthorizationRate / CapacityConflictProvider DependencyTemporary FailureUnknown External State

Conceptual categories - exact status codes and error payloads are confirmed during integration onboarding.

Rate & Capacity Governance

Capacity is committed by contract, not a fixed published number

Limits vary by plan and committed capacity - this is intentional, not an omission. Enterprise and Hyperscale tiers negotiate capacity as part of the commercial relationship.

Integrations

Real, evidenced integration classes

Channels your customers already message you on, and commerce/payment systems you already run.

WhatsAppInstagramMessengerTelegramSMSEmail
Shopify (catalog sync)Stripe (payments)Moyasar (regional payments)Configurable CRM connection

Additional integration classes (ERP, analytics platforms, custom systems) are evaluated per enterprise engagement - listed generically above where the specific vendor isn't yet a confirmed integration.

Webhook Security

Verify before trust - the same principle published in full on Security & Trust

The security model behind every inbound event on this page is the same one Hudhud runs in production.

Sender/provider signature verification before any processing
Tenant context is server-derived, never trusted from the payload
Replay and idempotency considered on the receiving path
Credentials handled and stored server-side only
Observability for Developers

Visibility into what actually happened

An integration you can't observe is an integration you can't trust.

Request state - accepted, processed, or rejected
Event delivery state - queued, delivered, or retried
Integration health at a glance
Failure and recovery state
Audit evidence for attributable actions
Developer Experience

Predictable contracts over clever tricks

The things that make an integration boring to maintain are the things we optimize for.

Clear, versioned contracts
Predictable, categorized errors
Idempotent-by-design event handling
Observable delivery, not a black box
Safe retry semantics
Confirmed integration details during onboarding, not guesswork
Versioning

Contracts evolve without breaking what already works

Schema and contract changes follow a backward-compatibility discipline.

Versioned contractsBackward-compatibility discipline on changesSchema evolution without breaking existing integrations
Shape, Not Specification

What a request and a verification check look like conceptually

A triggered action (conceptual)
curl -X POST "<your-hudhud-endpoint>/conversations/{id}/actions" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"action": "recommend_product"}'
Verifying an inbound event (conceptual)
// verify before trust - shape only
const isValid = verifySignature(rawBody, signatureHeader, sharedSecret);
if (!isValid) return reject();

CONCEPTUAL EXAMPLE - illustrates shape only, not a frozen public contract or a real endpoint

Enterprise Integration Review

Request an Integration Architecture Review

A direct conversation about your existing systems, expected load, and integration requirements.

Existing systemsCRM / ERPCommerceMessagingAuthenticationEventsData boundariesExpected loadRate requirementsSecurity requirementsRegional needsRecovery expectations
Request Integration Review
Explore more

Illustrative integration flow - conceptual examples, not a live production contract