What do you mean by hidden API? Is this just a custom API? Or you mean private API? I did not find much information about it online.
If it’s private, like you found it by investigating GHL network requests, most likely you need custom auth config. That usually entails a generated key/token/and or JWT and some cookies for validation.
Can you demo me where exactly? What was the root url you used to discover the endpoint?
My recommendation is finding it again, copying the request as CURL, pasting into a terminal and running (if on linux/mac) the curl command to see if it functions. Then slowly start removing things to see what is required. Typically special headers and cookies are required.
Then you can investigate the page to see where those are generated (if possible). Sometimes they are short lived or long lived, so you could also create a playwright script to capture the headers and cookies and then send to your scenario to use them.
Interesting. That seems true. Does their sms come from twilio? You may be able to fetch data that way. Or set up webhooks to keep data in a db moving forward.