Developers

A REST API on every paid tier.

Online Waiver Software ships a versioned JSON REST API and HMAC-signed webhooks from the Growth tier up — so your POS, booking platform, or eCommerce site can launch signing flows and react to events in real time.

Get an API key — start free

Authentication

Bearer API keys

Mint keys in the admin under Settings → API keys. Keys are shown once at creation and stored hashed — copy yours immediately. Send it as a bearer token on every request:

curl https://app.onlinewaiversoftware.com/api/v1/waivers \
  -H "Authorization: Bearer ows_live_xxxxxxxxxxxx"

Requests are scoped to the key's tenant. There is no way to read another business's data with your key — isolation is enforced at the database layer.

Reference

API v1 endpoints

GET/api/v1/waivers

List signed waivers (paginated: limit, offset).

GET/api/v1/waivers/:id

Retrieve a single signed waiver.

GET/api/v1/waivers/:id/pdf

302-redirect to a 15-minute signed URL for the audit-packet PDF.

GET/api/v1/templates

List your waiver templates.

POST/api/v1/templates

Create a waiver template.

GET/api/v1/templates/:id

Retrieve a single template.

PATCH/api/v1/templates/:id

Update a template's settings or block layout.

DELETE/api/v1/templates/:id

Delete a template.

POST/api/v1/signing-links

Mint a signing link with optional pre-filled signer data + external_customer_id that round-trips to webhooks.

GET/api/v1/customers

Search customers across signed waivers (one row per unique signer).

Webhooks

HMAC-signed event delivery

Register endpoint URLs in the admin and Online Waiver Software POSTs JSON event payloads as they happen. Every request carries an X-OWS-Signature header — an HMAC-SHA256 of the raw body keyed by your per-endpoint secret. Verify it before trusting a payload. Deliveries retry with exponential backoff and carry an idempotency key so you can de-duplicate safely.

waiver.signed

Fires when a new waiver is signed.

waiver.reattested

Fires when a signer re-attests on a return visit.

incident.created

Fires when an incident report is filed.

Build on it.

The API + webhooks are included from the Growth tier. Sign up free, then mint a key in Settings → API keys.

Start free See pricing