fetch / curl — but for
production integrations we recommend reaching for the official SDK. It
handles auth, retries on 429/5xx, error mapping, and typed request
payloads so a server-side change surfaces as a compile error instead of
a runtime surprise.
TypeScript / JavaScript
fetch.
Hello, world
Cover map
Error handling
Non-2xx responses becomeNotealyApiError with status, code,
message, parsed body, and requestId (when the server sets the
X-Request-Id header).
429 (honoring X-RateLimit-Reset) and 5xx
responses automatically. Override the policy or disable it per call:
Webhooks
Verify the signature on every delivery — the SDK ships the same HMAC formula the API uses to sign:JSON.parse
breaks the signature. See Webhooks → Signing for
detail.