curl https://api.hush-sms.com/v1/me \
  -H "Authorization: Bearer $HUSH_API_KEY"

{
  "user": {
    "id": 123456789,
    "username": "hush_user",
    "balance": 150.0,
    "bought_numbers": 42,
    "activated_numbers": 40
  }
}

curl "https://api.hush-sms.com/v1/services/tg/countries?sort=price" \
  -H "Authorization: Bearer $HUSH_API_KEY"

{
  "service": "tg",
  "countries": [
    { "id": 0, "name": "Россия", "icon": "🇷🇺", "price": 21, "quantity": 320 },
    { "id": 1, "name": "Украина", "icon": "🇺🇦", "price": 23, "quantity": 140 }
  ]
}

IDEMPOTENCY_KEY=$(uuidgen)

curl -X POST https://api.hush-sms.com/v1/numbers \
  -H "Authorization: Bearer $HUSH_API_KEY" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"service": "tg", "country": 0}'

{
  "order": {
    "id": "66f2b8a8e7ad0a0012c34567",
    "status": "pending",
    "service": "tg",
    "country": "0",
    "phone_number": "+79991112233",
    "price": 21,
    "created_at": "2025-09-24T17:35:00.482000+00:00"
  }
}

curl https://api.hush-sms.com/v1/numbers/66f2b8a8e7ad0a0012c34567 \
  -H "Authorization: Bearer $HUSH_API_KEY"

{
  "order": {
    "id": "66f2b8a8e7ad0a0012c34567",
    "status": "sms_received",
    "service": "tg",
    "country": "0",
    "phone_number": "+79991112233",
    "price": 21,
    "sms_codes": ["482716"],
    "created_at": "2025-09-24T17:35:00.482000+00:00",
    "last_activity_at": "2025-09-24T17:36:12.345000+00:00"
  }
}

curl -X POST https://api.hush-sms.com/v1/orders/66f2b8a8e7ad0a0012c34567/finish \
  -H "Authorization: Bearer $HUSH_API_KEY"

Тело ответа пустое.

curl -X POST https://api.hush-sms.com/v1/numbers/66f2b8a8e7ad0a0012c34567/cancel \
  -H "Authorization: Bearer $HUSH_API_KEY"

{
  "id": "66f2b8a8e7ad0a0012c34567",
  "status": "canceled"
}

{
  "error": {
    "code": "too_early",
    "message": "Cancel not allowed until 120s after order creation for this provider",
    "details": { "seconds_left": 45 }
  }
}

import os
import time
import uuid

import requests

API = "https://api.hush-sms.com"
HEADERS = {"Authorization": f"Bearer {os.environ['HUSH_API_KEY']}"}


def error_code(resp):
    try:
        return resp.json()["error"]["code"]
    except (ValueError, KeyError, TypeError):
        return None


def buy_number(service: str, country: int) -> dict:
    key = str(uuid.uuid4())  # один ключ на одну покупку
    for attempt in range(3):
        resp = requests.post(
            f"{API}/v1/numbers",
            headers={**HEADERS, "Idempotency-Key": key},
            json={"service": service, "country": country},
            timeout=30,
        )
        retry = resp.status_code == 504 or error_code(resp) == "idempotency_key_processing"
        if retry and attempt < 2:
            time.sleep(3)
            continue
        resp.raise_for_status()
        return resp.json()["order"]


def wait_for_code(order_id: str, timeout_sec: int = 300) -> str | None:
    deadline = time.monotonic() + timeout_sec
    while time.monotonic() < deadline:
        resp = requests.get(f"{API}/v1/numbers/{order_id}", headers=HEADERS, timeout=15)
        resp.raise_for_status()
        order = resp.json()["order"]
        if order.get("sms_codes"):
            return order["sms_codes"][-1]
        if order["status"] != "pending":
            return None
        time.sleep(4)
    return None


order = buy_number("tg", 0)
print("Номер:", order["phone_number"])

code = wait_for_code(order["id"])
if code:
    print("Код:", code)
    requests.post(f"{API}/v1/orders/{order['id']}/finish", headers=HEADERS, timeout=15)
else:
    requests.post(f"{API}/v1/numbers/{order['id']}/cancel", headers=HEADERS, timeout=15)

from flask import Flask, request

app = Flask(__name__)
seen = set()  # в продакшене — таблица в базе данных


@app.post("/hooks/hush")
def hush_webhook():
    if request.headers.get("X-Hush-Event") != "sms.received":
        return "", 204

    event = request.get_json(force=True)
    if event.get("test"):
        return "", 204

    key = (event["activationId"], event.get("code"))
    if key not in seen:
        seen.add(key)
        save_code(event["activationId"], event["code"], event["text"])

    return "", 204