الـ API والويب هوك

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-confirm" \
  -d '{
  "to": "201001234567",
  "type": "buttons",
  "body": {
    "text": "هل تؤكد طلبك؟"
  },
  "footer": {
    "text": "متجر النور"
  },
  "buttons": [
    {
      "id": "confirm",
      "title": "تأكيد"
    },
    {
      "id": "cancel_order",
      "title": "إلغاء الطلب"
    }
  ],
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-confirm',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "buttons",
    "body": {
      "text": "هل تؤكد طلبك؟"
    },
    "footer": {
      "text": "متجر النور"
    },
    "buttons": [
      {
        "id": "confirm",
        "title": "تأكيد"
      },
      {
        "id": "cancel_order",
        "title": "إلغاء الطلب"
      }
    ],
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'buttons',
    'body' => [
        'text' => 'هل تؤكد طلبك؟',
    ],
    'footer' => [
        'text' => 'متجر النور',
    ],
    'buttons' => [
        [
            'id' => 'confirm',
            'title' => 'تأكيد',
        ],
        [
            'id' => 'cancel_order',
            'title' => 'إلغاء الطلب',
        ],
    ],
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-confirm',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "buttons",
    "body": {
        "text": "هل تؤكد طلبك؟",
    },
    "footer": {
        "text": "متجر النور",
    },
    "buttons": [
        {
            "id": "confirm",
            "title": "تأكيد",
        },
        {
            "id": "cancel_order",
            "title": "إلغاء الطلب",
        },
    ],
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-confirm",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-shipped" \
  -d '{
  "to": "201001234567",
  "type": "text",
  "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-shipped',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "text",
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'text',
    'text' => 'أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.',
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-shipped',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "text",
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-shipped",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-shipped" \
  -d '{
  "to": "201001234567",
  "type": "text",
  "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-shipped',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "text",
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'text',
    'text' => 'أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.',
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-shipped',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "text",
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-shipped",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: launch-photo-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "image",
  "media": {
    "url": "https://example.com/products/new.jpg"
  },
  "caption": "المنتج الجديد وصل 🎉"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'launch-photo-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "image",
    "media": {
      "url": "https://example.com/products/new.jpg"
    },
    "caption": "المنتج الجديد وصل 🎉"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'image',
    'media' => [
        'url' => 'https://example.com/products/new.jpg',
    ],
    'caption' => 'المنتج الجديد وصل 🎉',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: launch-photo-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "image",
    "media": {
        "url": "https://example.com/products/new.jpg",
    },
    "caption": "المنتج الجديد وصل 🎉",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "launch-photo-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: howto-video-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "video",
  "media": {
    "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0K"
  },
  "caption": "إزاي تستخدم المنتج في دقيقة"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'howto-video-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "video",
    "media": {
      "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0K"
    },
    "caption": "إزاي تستخدم المنتج في دقيقة"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'video',
    'media' => [
        'id' => 'med_01J9ZK4A2B3C4D5E6F7G8H9J0K',
    ],
    'caption' => 'إزاي تستخدم المنتج في دقيقة',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: howto-video-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "video",
    "media": {
        "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0K",
    },
    "caption": "إزاي تستخدم المنتج في دقيقة",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "howto-video-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: thanks-note-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "video",
  "media": {
    "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0L"
  },
  "videoNote": true
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'thanks-note-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "video",
    "media": {
      "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0L"
    },
    "videoNote": true
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'video',
    'media' => [
        'id' => 'med_01J9ZK4A2B3C4D5E6F7G8H9J0L',
    ],
    'videoNote' => true,
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: thanks-note-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "video",
    "media": {
        "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0L",
    },
    "videoNote": True,
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "thanks-note-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: jingle-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "audio",
  "media": {
    "url": "https://example.com/audio/jingle.mp3"
  }
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'jingle-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "audio",
    "media": {
      "url": "https://example.com/audio/jingle.mp3"
    }
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'audio',
    'media' => [
        'url' => 'https://example.com/audio/jingle.mp3',
    ],
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: jingle-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "audio",
    "media": {
        "url": "https://example.com/audio/jingle.mp3",
    },
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "jingle-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: voice-reply-1042" \
  -d '{
  "to": "201001234567",
  "type": "voice",
  "media": {
    "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0M"
  },
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'voice-reply-1042',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "voice",
    "media": {
      "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0M"
    },
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'voice',
    'media' => [
        'id' => 'med_01J9ZK4A2B3C4D5E6F7G8H9J0M',
    ],
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: voice-reply-1042',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "voice",
    "media": {
        "id": "med_01J9ZK4A2B3C4D5E6F7G8H9J0M",
    },
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "voice-reply-1042",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-invoice" \
  -d '{
  "to": "201001234567",
  "type": "document",
  "media": {
    "url": "https://example.com/invoices/1042.pdf"
  },
  "fileName": "invoice-1042.pdf",
  "caption": "فاتورة طلبك رقم 1042",
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-invoice',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "document",
    "media": {
      "url": "https://example.com/invoices/1042.pdf"
    },
    "fileName": "invoice-1042.pdf",
    "caption": "فاتورة طلبك رقم 1042",
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'document',
    'media' => [
        'url' => 'https://example.com/invoices/1042.pdf',
    ],
    'fileName' => 'invoice-1042.pdf',
    'caption' => 'فاتورة طلبك رقم 1042',
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-invoice',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "document",
    "media": {
        "url": "https://example.com/invoices/1042.pdf",
    },
    "fileName": "invoice-1042.pdf",
    "caption": "فاتورة طلبك رقم 1042",
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-invoice",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: thanks-sticker-1042" \
  -d '{
  "to": "201001234567",
  "type": "sticker",
  "media": {
    "url": "https://example.com/stickers/thanks.webp"
  }
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'thanks-sticker-1042',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "sticker",
    "media": {
      "url": "https://example.com/stickers/thanks.webp"
    }
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'sticker',
    'media' => [
        'url' => 'https://example.com/stickers/thanks.webp',
    ],
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: thanks-sticker-1042',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "sticker",
    "media": {
        "url": "https://example.com/stickers/thanks.webp",
    },
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "thanks-sticker-1042",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: store-location-1042" \
  -d '{
  "to": "201001234567",
  "type": "location",
  "latitude": 30.0444,
  "longitude": 31.2357,
  "name": "متجر النور",
  "address": "12 شارع التحرير، القاهرة"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'store-location-1042',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "location",
    "latitude": 30.0444,
    "longitude": 31.2357,
    "name": "متجر النور",
    "address": "12 شارع التحرير، القاهرة"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'location',
    'latitude' => 30.0444,
    'longitude' => 31.2357,
    'name' => 'متجر النور',
    'address' => '12 شارع التحرير، القاهرة',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: store-location-1042',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "location",
    "latitude": 30.0444,
    "longitude": 31.2357,
    "name": "متجر النور",
    "address": "12 شارع التحرير، القاهرة",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "store-location-1042",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: support-card-1042" \
  -d '{
  "to": "201001234567",
  "type": "contact",
  "contacts": [
    {
      "name": "خدمة عملاء متجر النور",
      "phones": [
        "+20 100 302 2759"
      ],
      "email": "support@example.com",
      "organization": "متجر النور"
    }
  ]
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'support-card-1042',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "contact",
    "contacts": [
      {
        "name": "خدمة عملاء متجر النور",
        "phones": [
          "+20 100 302 2759"
        ],
        "email": "support@example.com",
        "organization": "متجر النور"
      }
    ]
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'contact',
    'contacts' => [
        [
            'name' => 'خدمة عملاء متجر النور',
            'phones' => [
                '+20 100 302 2759',
            ],
            'email' => 'support@example.com',
            'organization' => 'متجر النور',
        ],
    ],
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: support-card-1042',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "contact",
    "contacts": [
        {
            "name": "خدمة عملاء متجر النور",
            "phones": [
                "+20 100 302 2759",
            ],
            "email": "support@example.com",
            "organization": "متجر النور",
        },
    ],
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "support-card-1042",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: survey-7-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "poll",
  "name": "أنهي يوم يناسبك للتوصيل؟",
  "options": [
    "الأحد",
    "الاثنين",
    "الثلاثاء"
  ],
  "selectableCount": 1,
  "reference": "survey-7"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'survey-7-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "poll",
    "name": "أنهي يوم يناسبك للتوصيل؟",
    "options": [
      "الأحد",
      "الاثنين",
      "الثلاثاء"
    ],
    "selectableCount": 1,
    "reference": "survey-7"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'poll',
    'name' => 'أنهي يوم يناسبك للتوصيل؟',
    'options' => [
        'الأحد',
        'الاثنين',
        'الثلاثاء',
    ],
    'selectableCount' => 1,
    'reference' => 'survey-7',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: survey-7-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "poll",
    "name": "أنهي يوم يناسبك للتوصيل؟",
    "options": [
        "الأحد",
        "الاثنين",
        "الثلاثاء",
    ],
    "selectableCount": 1,
    "reference": "survey-7",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "survey-7-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: opening-201001234567" \
  -d '{
  "to": "201001234567",
  "type": "event",
  "name": "افتتاح فرعنا الجديد",
  "description": "خصم 20% لأول 50 عميل",
  "startAt": "2026-11-01T17:00:00.000Z",
  "endAt": "2026-11-01T21:00:00.000Z",
  "locationName": "متجر النور — مدينة نصر"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'opening-201001234567',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "event",
    "name": "افتتاح فرعنا الجديد",
    "description": "خصم 20% لأول 50 عميل",
    "startAt": "2026-11-01T17:00:00.000Z",
    "endAt": "2026-11-01T21:00:00.000Z",
    "locationName": "متجر النور — مدينة نصر"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'event',
    'name' => 'افتتاح فرعنا الجديد',
    'description' => 'خصم 20% لأول 50 عميل',
    'startAt' => '2026-11-01T17:00:00.000Z',
    'endAt' => '2026-11-01T21:00:00.000Z',
    'locationName' => 'متجر النور — مدينة نصر',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: opening-201001234567',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "event",
    "name": "افتتاح فرعنا الجديد",
    "description": "خصم 20% لأول 50 عميل",
    "startAt": "2026-11-01T17:00:00.000Z",
    "endAt": "2026-11-01T21:00:00.000Z",
    "locationName": "متجر النور — مدينة نصر",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "opening-201001234567",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-confirm" \
  -d '{
  "to": "201001234567",
  "type": "buttons",
  "body": {
    "text": "هل تؤكد طلبك؟"
  },
  "footer": {
    "text": "متجر النور"
  },
  "buttons": [
    {
      "id": "confirm",
      "title": "تأكيد"
    },
    {
      "id": "cancel_order",
      "title": "إلغاء الطلب"
    }
  ],
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-confirm',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "buttons",
    "body": {
      "text": "هل تؤكد طلبك؟"
    },
    "footer": {
      "text": "متجر النور"
    },
    "buttons": [
      {
        "id": "confirm",
        "title": "تأكيد"
      },
      {
        "id": "cancel_order",
        "title": "إلغاء الطلب"
      }
    ],
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'buttons',
    'body' => [
        'text' => 'هل تؤكد طلبك؟',
    ],
    'footer' => [
        'text' => 'متجر النور',
    ],
    'buttons' => [
        [
            'id' => 'confirm',
            'title' => 'تأكيد',
        ],
        [
            'id' => 'cancel_order',
            'title' => 'إلغاء الطلب',
        ],
    ],
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-confirm',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "buttons",
    "body": {
        "text": "هل تؤكد طلبك؟",
    },
    "footer": {
        "text": "متجر النور",
    },
    "buttons": [
        {
            "id": "confirm",
            "title": "تأكيد",
        },
        {
            "id": "cancel_order",
            "title": "إلغاء الطلب",
        },
    ],
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-confirm",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: menu-201001234567-1" \
  -d '{
  "to": "201001234567",
  "type": "list",
  "body": {
    "text": "إزاي نقدر نساعدك؟"
  },
  "list": {
    "buttonText": "اختار",
    "sections": [
      {
        "title": "الخدمات",
        "rows": [
          {
            "id": "prices",
            "title": "الأسعار",
            "description": "اعرف أسعارنا"
          },
          {
            "id": "hours",
            "title": "مواعيد العمل"
          }
        ]
      },
      {
        "title": "الدعم",
        "rows": [
          {
            "id": "agent",
            "title": "كلّم موظف",
            "description": "حد من الفريق هيرد عليك"
          }
        ]
      }
    ]
  },
  "reference": "menu-main"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'menu-201001234567-1',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "list",
    "body": {
      "text": "إزاي نقدر نساعدك؟"
    },
    "list": {
      "buttonText": "اختار",
      "sections": [
        {
          "title": "الخدمات",
          "rows": [
            {
              "id": "prices",
              "title": "الأسعار",
              "description": "اعرف أسعارنا"
            },
            {
              "id": "hours",
              "title": "مواعيد العمل"
            }
          ]
        },
        {
          "title": "الدعم",
          "rows": [
            {
              "id": "agent",
              "title": "كلّم موظف",
              "description": "حد من الفريق هيرد عليك"
            }
          ]
        }
      ]
    },
    "reference": "menu-main"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'list',
    'body' => [
        'text' => 'إزاي نقدر نساعدك؟',
    ],
    'list' => [
        'buttonText' => 'اختار',
        'sections' => [
            [
                'title' => 'الخدمات',
                'rows' => [
                    [
                        'id' => 'prices',
                        'title' => 'الأسعار',
                        'description' => 'اعرف أسعارنا',
                    ],
                    [
                        'id' => 'hours',
                        'title' => 'مواعيد العمل',
                    ],
                ],
            ],
            [
                'title' => 'الدعم',
                'rows' => [
                    [
                        'id' => 'agent',
                        'title' => 'كلّم موظف',
                        'description' => 'حد من الفريق هيرد عليك',
                    ],
                ],
            ],
        ],
    ],
    'reference' => 'menu-main',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: menu-201001234567-1',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "list",
    "body": {
        "text": "إزاي نقدر نساعدك؟",
    },
    "list": {
        "buttonText": "اختار",
        "sections": [
            {
                "title": "الخدمات",
                "rows": [
                    {
                        "id": "prices",
                        "title": "الأسعار",
                        "description": "اعرف أسعارنا",
                    },
                    {
                        "id": "hours",
                        "title": "مواعيد العمل",
                    },
                ],
            },
            {
                "title": "الدعم",
                "rows": [
                    {
                        "id": "agent",
                        "title": "كلّم موظف",
                        "description": "حد من الفريق هيرد عليك",
                    },
                ],
            },
        ],
    },
    "reference": "menu-main",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "menu-201001234567-1",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-track" \
  -d '{
  "to": "201001234567",
  "type": "cta_url",
  "body": {
    "text": "شحنتك في الطريق 🚚"
  },
  "cta": {
    "title": "تتبع الشحنة",
    "url": "https://example.com/track/1042"
  },
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-track',
  },
  body: JSON.stringify({
    "to": "201001234567",
    "type": "cta_url",
    "body": {
      "text": "شحنتك في الطريق 🚚"
    },
    "cta": {
      "title": "تتبع الشحنة",
      "url": "https://example.com/track/1042"
    },
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'to' => '201001234567',
    'type' => 'cta_url',
    'body' => [
        'text' => 'شحنتك في الطريق 🚚',
    ],
    'cta' => [
        'title' => 'تتبع الشحنة',
        'url' => 'https://example.com/track/1042',
    ],
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-track',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "to": "201001234567",
    "type": "cta_url",
    "body": {
        "text": "شحنتك في الطريق 🚚",
    },
    "cta": {
        "title": "تتبع الشحنة",
        "url": "https://example.com/track/1042",
    },
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-track",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/react" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: react-3EB0A1B2-1" \
  -d '{
  "emoji": "👍"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/react', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'react-3EB0A1B2-1',
  },
  body: JSON.stringify({
    "emoji": "👍"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'emoji' => '👍',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/react');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: react-3EB0A1B2-1',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "emoji": "👍",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/react",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "react-3EB0A1B2-1",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/edit" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: edit-3EB0A1B2-1" \
  -d '{
  "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بعد بكرة."
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/edit', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'edit-3EB0A1B2-1',
  },
  body: JSON.stringify({
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بعد بكرة."
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'text' => 'أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بعد بكرة.',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/edit');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: edit-3EB0A1B2-1',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "text": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بعد بكرة.",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/edit",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "edit-3EB0A1B2-1",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/delete" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: delete-3EB0A1B2-1" \
  -d '{
  "forEveryone": true
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/delete', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'delete-3EB0A1B2-1',
  },
  body: JSON.stringify({
    "forEveryone": true
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'forEveryone' => true,
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/delete');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: delete-3EB0A1B2-1',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "forEveryone": True,
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/messages/3EB0A1B2C3D4E5F60718/delete",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "delete-3EB0A1B2-1",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X GET "https://mursilat.com/api/v1/whatsapp/public/interactions/int_8f2c1d9a7b3e4f56a1b2c3d4" \
  -H "x-api-key: $WASLA_API_KEY"

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/interactions/int_8f2c1d9a7b3e4f56a1b2c3d4', {
  method: 'GET',
  headers: {
    'x-api-key': process.env.WASLA_API_KEY,
  },
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/interactions/int_8f2c1d9a7b3e4f56a1b2c3d4');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'x-api-key: ' . getenv('WASLA_API_KEY'),
    ],
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

res = requests.get(
    "https://mursilat.com/api/v1/whatsapp/public/interactions/int_8f2c1d9a7b3e4f56a1b2c3d4",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
    },
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

// Node.js + Express. Use the RAW body: JSON.parse → JSON.stringify changes bytes and breaks the signature.
import crypto from 'node:crypto';
import express from 'express';

const app = express();
const SECRET = process.env.WASLA_WEBHOOK_SECRET;
const seen = new Set(); // use Redis/DB in production

function verifyWaslaSignature(rawBody, header, secret, toleranceSec = 300) {
  if (!header || !secret) return false;
  const parts = {};
  for (const pair of header.split(',')) {
    const i = pair.indexOf('=');
    if (i > 0) parts[pair.slice(0, i).trim()] = pair.slice(i + 1).trim();
  }
  const t = parts.t;
  const v1 = parts.v1;
  if (!/^\d+$/.test(t || '') || !/^[0-9a-f]{64}$/i.test(v1 || '')) return false;
  // Reject old (replayed) or far-future timestamps.
  if (Math.abs(Math.floor(Date.now() / 1000) - Number(t)) > toleranceSec) return false;
  const expected = crypto
    .createHmac('sha256', secret)
    .update(t + '.')
    .update(rawBody) // the RAW bytes exactly as received, not re-serialized JSON
    .digest();
  const received = Buffer.from(v1, 'hex');
  return received.length === expected.length && crypto.timingSafeEqual(received, expected);
}

app.post('/webhooks/mursilat', express.raw({ type: 'application/json' }), (req, res) => {
  if (!verifyWaslaSignature(req.body, req.get('X-Wasla-Signature'), SECRET)) {
    return res.status(401).send('invalid signature');
  }
  const event = JSON.parse(req.body.toString('utf8'));
  res.sendStatus(200); // answer fast (within 10s); do the work after

  if (seen.has(event.id)) return; // retries reuse the same event id
  seen.add(event.id);
  if (event.type === 'interactive.reply') {
    console.log(event.data.reference, '→', event.data.reply.id);
  }
});

app.listen(3000);

<?php
// Use the RAW body (php://input), never a re-encoded json_decode() result.
function wasla_verify_signature(string $rawBody, string $header, string $secret, int $toleranceSec = 300): bool
{
    $parts = [];
    foreach (explode(',', $header) as $pair) {
        $kv = explode('=', trim($pair), 2);
        if (count($kv) === 2) {
            $parts[$kv[0]] = $kv[1];
        }
    }
    $t = $parts['t'] ?? '';
    $v1 = $parts['v1'] ?? '';
    if ($secret === '' || !ctype_digit($t) || !preg_match('/^[0-9a-f]{64}$/i', $v1)) {
        return false;
    }
    // Reject old (replayed) or far-future timestamps.
    if (abs(time() - (int) $t) > $toleranceSec) {
        return false;
    }
    $expected = hash_hmac('sha256', $t . '.' . $rawBody, $secret);
    return hash_equals($expected, strtolower($v1)); // constant-time
}

$rawBody = file_get_contents('php://input');
$header = $_SERVER['HTTP_X_WASLA_SIGNATURE'] ?? '';

if (!wasla_verify_signature($rawBody, $header, getenv('WASLA_WEBHOOK_SECRET') ?: '')) {
    http_response_code(401);
    exit('invalid signature');
}

$event = json_decode($rawBody, true);
http_response_code(200); // answer fast (within 10s)

// Retries reuse the same event id — store it and skip duplicates.
if ($event['type'] === 'interactive.reply') {
    error_log($event['data']['reference'] . ' -> ' . $event['data']['reply']['id']);
}

# Python 3 + Flask. Use the RAW body (request.get_data()), not request.json re-encoded.
import hashlib
import hmac
import json
import os
import time

from flask import Flask, abort, request

app = Flask(__name__)
SECRET = os.environ["WASLA_WEBHOOK_SECRET"]


def verify_wasla_signature(raw_body: bytes, header: str, secret: str, tolerance_sec: int = 300) -> bool:
    parts = {}
    for pair in (header or "").split(","):
        key, sep, value = pair.strip().partition("=")
        if sep:
            parts[key] = value
    t, v1 = parts.get("t", ""), parts.get("v1", "")
    if not secret or not t.isdigit() or len(v1) != 64:
        return False
    # Reject old (replayed) or far-future timestamps.
    if abs(time.time() - int(t)) > tolerance_sec:
        return False
    expected = hmac.new(secret.encode(), t.encode() + b"." + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, v1.lower())  # constant-time


@app.post("/webhooks/mursilat")
def mursilat_webhook():
    raw = request.get_data()  # bytes exactly as received
    if not verify_wasla_signature(raw, request.headers.get("X-Wasla-Signature", ""), SECRET):
        abort(401)
    event = json.loads(raw)
    # Retries reuse the same event id — store it and skip duplicates.
    if event["type"] == "interactive.reply":
        print(event["data"]["reference"], "->", event["data"]["reply"]["id"])
    return "", 200  # answer fast (within 10s)

# Recompute a signature by hand (debugging). body.json = the raw request body, byte for byte.
# Header: X-Wasla-Signature: t=1760097603,v1=<hex>
T=1760097603
printf '%s.' "$T" | cat - body.json | openssl dgst -sha256 -hmac "$WASLA_WEBHOOK_SECRET" -hex
# → compare the hex digest with v1 (and check that T is within 5 minutes of now)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/message/send" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-shipped" \
  -d '{
  "phoneNumber": "201001234567",
  "content": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/message/send', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-shipped',
  },
  body: JSON.stringify({
    "phoneNumber": "201001234567",
    "content": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'phoneNumber' => '201001234567',
    'content' => 'أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.',
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/message/send');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-shipped',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "phoneNumber": "201001234567",
    "content": "أهلاً أ. منى، طلبك رقم 1042 اتشحن وهيوصلك بكرة.",
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/message/send",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-shipped",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)

curl -X POST "https://mursilat.com/api/v1/whatsapp/public/media/send" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $WASLA_API_KEY" \
  -H "Idempotency-Key: order-1042-invoice" \
  -d '{
  "phoneNumber": "201001234567",
  "mediaType": "document",
  "mediaUrl": "https://example.com/invoices/1042.pdf",
  "filename": "invoice-1042.pdf",
  "caption": "فاتورة طلبك رقم 1042",
  "reference": "order-1042"
}'

// Node.js 18+ (built-in fetch)
const res = await fetch('https://mursilat.com/api/v1/whatsapp/public/media/send', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': process.env.WASLA_API_KEY,
    'Idempotency-Key': 'order-1042-invoice',
  },
  body: JSON.stringify({
    "phoneNumber": "201001234567",
    "mediaType": "document",
    "mediaUrl": "https://example.com/invoices/1042.pdf",
    "filename": "invoice-1042.pdf",
    "caption": "فاتورة طلبك رقم 1042",
    "reference": "order-1042"
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.message}`);
console.log(data);

<?php
$payload = [
    'phoneNumber' => '201001234567',
    'mediaType' => 'document',
    'mediaUrl' => 'https://example.com/invoices/1042.pdf',
    'filename' => 'invoice-1042.pdf',
    'caption' => 'فاتورة طلبك رقم 1042',
    'reference' => 'order-1042',
];

$ch = curl_init('https://mursilat.com/api/v1/whatsapp/public/media/send');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . getenv('WASLA_API_KEY'),
        'Idempotency-Key: order-1042-invoice',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_UNICODE),
]);
$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$data = json_decode($response, true);
if ($status >= 400) {
    throw new RuntimeException($data['code'] . ': ' . json_encode($data['message']));
}
print_r($data);

import os
import requests

payload = {
    "phoneNumber": "201001234567",
    "mediaType": "document",
    "mediaUrl": "https://example.com/invoices/1042.pdf",
    "filename": "invoice-1042.pdf",
    "caption": "فاتورة طلبك رقم 1042",
    "reference": "order-1042",
}

res = requests.post(
    "https://mursilat.com/api/v1/whatsapp/public/media/send",
    headers={
        "x-api-key": os.environ["WASLA_API_KEY"],
        "Idempotency-Key": "order-1042-invoice",
    },
    json=payload,
    timeout=30,
)
data = res.json()
if not res.ok:
    raise RuntimeError(f"{data.get('code')}: {data.get('message')}")
print(data)