API Documentation

Authentication

All API requests require authentication via either:

• Authorization: Bearer <supabase_jwt>
• x-api-key: <your_api_key>

Base URL

https://api.your-domain.com/v1

Sessions

POST   /sessions              → create session
GET    /sessions              → list sessions
GET    /sessions/:id          → get session
POST   /sessions/:id/restart  → restart
POST   /sessions/:id/logout   → logout WhatsApp
DELETE /sessions/:id          → delete

Messages

POST   /sessions/:id/messages        → send text
POST   /sessions/:id/messages/media  → send media
GET    /sessions/:id/messages        → list messages
GET    /messages/:messageId          → get message

Webhooks

PUT    /sessions/:id/webhook           → configure
GET    /sessions/:id/webhook           → get config
POST   /sessions/:id/webhook/rotate    → rotate secret
POST   /sessions/:id/webhook/test      → send test
DELETE /sessions/:id/webhook           → remove
GET    /webhook-deliveries             → list deliveries
POST   /webhook-deliveries/:id/retry   → retry

API Keys

POST   /api-keys      → create
GET    /api-keys      → list
DELETE /api-keys/:id  → revoke