Developer API

import requests, base64

with open("contract.pdf", "rb") as f:
    pdf_b64 = base64.b64encode(f.read()).decode()

response = requests.post(
    "https://signforge.io/api/v1/quick-sign",
    headers={"X-API-Key": "sf_live_YOUR_KEY"},
    json={
        "title": "Service Agreement",
        "pdf_base64": pdf_b64,
        "signer_email": "client@company.com",
        "signer_name": "Alex Chen",
    },
)

data = response.json()
print(f"Envelope: {data['envelope_id']}")
print(f"Status: {data['status']}")

{
  "event": "envelope.completed",
  "envelope_id": "550e8400-e29b-41d4-a716-446655440000",
  "timestamp": "2026-03-25T12:00:00Z",
  "data": {
    "title": "Service Agreement",
    "status": "completed",
    "recipients": [
      {
        "email": "signer@example.com",
        "name": "Jane Doe",
        "status": "signed",
        "signed_at": "2026-03-25T11:59:00Z"
      }
    ],
    "download_urls": {
      "signed": "/api/v1/envelopes/{id}/documents/signed",
      "certificate": "/api/v1/envelopes/{id}/documents/certificate"
    }
  }
}

const crypto = require("crypto");

function verifyWebhook(body, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(signature)
  );
}

// In your Express handler:
app.post("/webhook", (req, res) => {
  const sig = req.headers["x-webhook-signature"];
  if (!verifyWebhook(req.rawBody, sig, WEBHOOK_SECRET)) {
    return res.status(401).send("Invalid signature");
  }
  const event = req.body;
  console.log("Event:", event.event, event.envelope_id);
  res.sendStatus(200);
});