> ## Documentation Index
> Fetch the complete documentation index at: https://netgear.docs.everestagi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# APIs, Webhooks, SSO, and Embedding

> Outbound REST calls, event webhooks, SAML/OIDC authentication, and chat widget embedding in Everest.

## REST API Calls (Lookup and Actions)

Everest executes authenticated outbound REST calls (GET, POST, and PUT) mid-conversation from any flow step. Requests support custom headers and bearer token or API key authentication. JSON responses are parsed into conversation variables for use in later steps and branching. Flows include configurable retries and dedicated error branches, so failed calls route to a fallback path instead of ending the conversation.

## Webhook / Event Push

Everest pushes conversation events to external systems via webhooks with signed payloads for verification. Triggers are configurable per endpoint:

* Escalation to a human agent.
* Case created.
* Resolution confirmed.
* Custom events raised from within a flow.

## Authentication / SSO (Authenticated Channel)

Everest integrates with the customer identity provider over SAML 2.0 or OIDC for authenticated sessions. After sign-in, the identity token is passed through to downstream API calls and Salesforce requests, so lookups and actions execute in the context of the verified user. Guest sessions remain available alongside SSO, with the more limited capability set described in Security and Access.

## Third-Party Chat Widget Embedding

The chat widget embeds on external websites via a JavaScript snippet or an iFrame. Styling is customizable, including colors, logo, and position, to match the host site. A domain allowlist restricts which origins can load the widget, and requests from unlisted domains are rejected.