# Lead actions

A lead action is a button on a lead in DialEcho that opens your own web app for that lead, for example a quoting or scheduling tool your team works in. It is set up on the API key your app uses: a button label and the URL of your page.

When a team member clicks it, DialEcho opens your URL with a `dialecho_token` query parameter: a signed launch token saying which member opened which lead, valid for 10 minutes. Treat it as opaque. Your server sends it to `POST /v1/lead-actions/verify` with that API key and trusts only the response, then starts its own session and redirects to the same page without the token, so it does not stay in the browser history or leak in a `Referer` header.

## Endpoints

### [Verify a launch token](/api/lead-actions/verify)

`POST /v1/lead-actions/verify`

Checks a lead-action token and returns the team member and lead it was issued for.