client from Set up the client.
Set your credentials once:
AUTH_ID is your Vobiz Auth ID (MA_…), AUTH_TOKEN is your Auth Token. In the Vobiz SDK, api_key is the Auth ID, and every account-scoped method takes that auth_id explicitly.List call records
Completed-call history is a first-classcdr resource on Vobiz, with rich filters for reporting.
Validate a webhook signature
Both platforms sign inbound webhooks so you can prove the request came from them. Twilio’sRequestValidator rebuilds the full URL plus every sorted POST field and HMAC-SHA1s it against X-Twilio-Signature. Vobiz signs a short, deterministic string - baseURL + "." + nonce (query stripped) - with HMAC-SHA256, and sends it as X-Vobiz-Signature-V3 with the random nonce in X-Vobiz-Signature-V3-Nonce. No param-sorting step, reproducible in any language with the standard library.
On sub-account callbacks Vobiz also adds
X-Vobiz-Signature-MA-V3, signed with the parent (main-account) token, so a parent can verify child traffic with the same validator. Full mapping and the Node version: webhooks & signatures.Handle errors
Catch the Vobiz error types (all subclasses ofApiError) the same way you caught Twilio’s TwilioRestException - with the HTTP status and response body available on the exception.