Messages
List sent messages (status only)
GET
/v2/messages- Scope:
messages:read - Idempotency-Key:not used
- number key ok— Also accepts the legacy per-number x-api-key, for its own number.
- read only
Messages sent through API v2 in the last 30 days — never content.
Parameters
Query
| Name | Type | Constraints | Description |
|---|---|---|---|
limitoptional | Typeinteger | Constraints— | Description1–100, default 25. |
cursoroptional | Typestring | Constraints— | DescriptionnextCursor of the previous page. |
numberIdoptional | Typestring | Constraints— | DescriptionOnly this number. |
statusoptional | Typestring | Constraints— | Descriptionscheduled | queued | sent | delivered | read | failed | cancelled |
referenceoptional | Typestring | Constraints— | DescriptionYour reference. |
Headers
| Name | Type | Constraints | Description |
|---|---|---|---|
X-Request-Idoptional | Typestring | Constraints— | DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support. |
Request
curl -X GET "https://mursilat.com/api/v2/messages?reference=order-1042" \
-H "Authorization: Bearer $WASLA_API_KEY"const res = await fetch('https://mursilat.com/api/v2/messages?reference=order-1042', {
method: 'GET',
headers: {
Authorization: `Bearer ${process.env.WASLA_API_KEY}`,
},
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.error.code}: ${data.error.message}`);
console.log(data);import os
import requests
headers = {"Authorization": f"Bearer {os.environ['WASLA_API_KEY']}"}
res = requests.get(
"https://mursilat.com/api/v2/messages?reference=order-1042",
headers=headers,
timeout=30,
)
data = res.json()
if not res.ok:
raise RuntimeError(f"{data['error']['code']}: {data['error']['message']}")
print(data)<?php
$ch = curl_init('https://mursilat.com/api/v2/messages?reference=order-1042');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'GET',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer ' . getenv('WASLA_API_KEY'),
],
]);
$data = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) { throw new Exception($data['error']['code'] . ': ' . $data['error']['message']); }
print_r($data);Response
200Example
{
"data": [
{
"id": "3EB0A1B2C3D4E5F60718",
"numberId": "cm1abcd2345efgh6789ijkl",
"type": "text",
"reference": "order-1042",
"to": "2010****4567",
"status": "read",
"scheduledAt": null,
"error": null,
"interactionId": null,
"timeline": [
{
"status": "queued",
"at": "2026-10-13T08:00:00.000Z"
},
{
"status": "sent",
"at": "2026-10-13T08:00:01.200Z"
},
{
"status": "delivered",
"at": "2026-10-13T08:00:02.900Z"
},
{
"status": "read",
"at": "2026-10-13T08:03:10.000Z"
}
],
"createdAt": "2026-10-13T08:00:00.000Z",
"updatedAt": "2026-10-13T08:03:10.000Z"
}
],
"nextCursor": null
}Response schema
Fields of the example answer. Expand objects and arrays.
responseobject2 fields
dataarray1 items
[0]object12 fields
- idstring "3EB0A1B2C3D4E5F60718"
- numberIdstring "cm1abcd2345efgh6789ijkl"
- typestring "text"
- referencestring "order-1042"
- tostring "2010****4567"
- statusstring "read"
- scheduledAtnull null
- errornull null
- interactionIdnull null
timelinearray4 items
[0]object2 fields
- statusstring "queued"
- atstring "2026-10-13T08:00:00.000Z"
- createdAtstring "2026-10-13T08:00:00.000Z"
- updatedAtstring "2026-10-13T08:03:10.000Z"
- nextCursornull null
Errors
Only the common authentication, rate-limit and validation errors.
Try it
Send this request from your browser to the Mursilat API.
documented examplePreview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.
Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (read only)
Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.
curl -X GET 'https://mursilat.com/api/v2/messages' \
-H "Authorization: Bearer $WASLA_API_KEY" \
-H 'Accept: application/json'