Numbers
Check numbers on WhatsApp (1–50)
POST
/v2/numbers/{numberId}/contacts/check- Scope:
numbers:read - Idempotency-Key:optional
- uses quota
Cache first (30 days), then live lookups within a per-minute budget that protects your number.
Parameters
Path
| Name | Type | Constraints | Description |
|---|---|---|---|
numberIdrequired | Typestring | Constraints— | DescriptionNumber id (GET /v2/numbers). |
Headers
| Name | Type | Constraints | Description |
|---|---|---|---|
Idempotency-Keyoptional | Typestring | Constraints≤ 191 chars | DescriptionYour unique id for this operation (≤ 191 visible ASCII). A retry with the same key and body returns the first answer with Idempotent-Replayed: true — it never runs twice. Kept 24 h. |
X-Request-Idoptional | Typestring | Constraints— | DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support. |
Body
| Name | Type | Constraints | Description |
|---|---|---|---|
phonesrequired | Typestring[] | Constraints≤ 50 items | Description1–50 numbers to check. Cached answers (30 days) come first; live lookups use a per-minute budget that protects your number. |
Request
curl -X POST "https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/contacts/check" \
-H "Authorization: Bearer $WASLA_API_KEY" \
-H "Idempotency-Key: order-1042-confirm" \
-H "Content-Type: application/json" \
-d '{
"phones": [
"201001234567",
"966501234567"
]
}'const res = await fetch('https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/contacts/check', {
method: 'POST',
headers: {
Authorization: `Bearer ${process.env.WASLA_API_KEY}`,
'Idempotency-Key': 'order-1042-confirm',
'Content-Type': 'application/json',
},
body: JSON.stringify({
"phones": [
"201001234567",
"966501234567"
]
}),
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.error.code}: ${data.error.message}`);
console.log(data);import os
import requests
headers = {"Authorization": f"Bearer {os.environ['WASLA_API_KEY']}", "Idempotency-Key": "order-1042-confirm"}
res = requests.post(
"https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/contacts/check",
headers=headers,
json={
"phones": [
"201001234567",
"966501234567"
]
},
timeout=30,
)
data = res.json()
if not res.ok:
raise RuntimeError(f"{data['error']['code']}: {data['error']['message']}")
print(data)<?php
$ch = curl_init('https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/contacts/check');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'POST',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer ' . getenv('WASLA_API_KEY'),
'Idempotency-Key: order-1042-confirm',
'Content-Type: application/json',
],
CURLOPT_POSTFIELDS => json_encode([
'phones' => [
'201001234567',
'966501234567'
]
], JSON_UNESCAPED_UNICODE),
]);
$data = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) { throw new Exception($data['error']['code'] . ': ' . $data['error']['message']); }
print_r($data);{
"phones": [
"201001234567",
"966501234567"
]
}Response
200Example
{
"data": [
{
"input": "201001234567",
"phone": "201001234567",
"onWhatsApp": true,
"jid": "201001234567@s.whatsapp.net",
"status": "ON_WHATSAPP"
}
],
"checked": 1,
"fromCache": 1,
"unknown": 0
}Response schema
Fields of the example answer. Expand objects and arrays.
responseobject4 fields
dataarray1 items
[0]object5 fields
- inputstring "201001234567"
- phonestring "201001234567"
- onWhatsAppboolean true
- jidstring "201001234567@s.whatsapp.net"
- statusstring "ON_WHATSAPP"
- checkedinteger 1
- fromCacheinteger 1
- unknowninteger 0
Errors
Besides the authentication, rate-limit and validation errors every endpoint can return:
- 422CONTACT_CHECK_TOO_MANYUp to 50 numbers per check.
Number Shield & behaviour
Live lookups are budgeted per minute to protect the number; more than 50 numbers per call answers 422 CONTACT_CHECK_TOO_MANY — campaigns check big lists in safe batches for you.
Try it
Send this request from your browser to the Mursilat API.
documented examplePreview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.
Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (uses quota)
Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.