Number Shield & stats
Daily statistics
GET
/v2/numbers/{numberId}/stats- Scope:
stats:read - Idempotency-Key:not used
- read only
sent, delivered, read, failed, replied, opt-outs per day (≤92 days).
Parameters
Path
| Name | Type | Constraints | Description |
|---|---|---|---|
numberIdrequired | Typestring | Constraints— | DescriptionNumber id (GET /v2/numbers). |
Query
| Name | Type | Constraints | Description |
|---|---|---|---|
fromoptional | Typestring | Constraints— | DescriptionFirst day YYYY-MM-DD (default: 6 days before to). At most 92 days. |
tooptional | Typestring | Constraints— | DescriptionLast day YYYY-MM-DD (default: today). |
granularityoptional | Typestring | Constraints— | DescriptionOnly day. |
Headers
| Name | Type | Constraints | Description |
|---|---|---|---|
X-Request-Idoptional | Typestring | Constraints— | DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support. |
Request
curl -X GET "https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/stats?from=2026-10-07&to=2026-10-13" \
-H "Authorization: Bearer $WASLA_API_KEY"const res = await fetch('https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/stats?from=2026-10-07&to=2026-10-13', {
method: 'GET',
headers: {
Authorization: `Bearer ${process.env.WASLA_API_KEY}`,
},
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.error.code}: ${data.error.message}`);
console.log(data);import os
import requests
headers = {"Authorization": f"Bearer {os.environ['WASLA_API_KEY']}"}
res = requests.get(
"https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/stats?from=2026-10-07&to=2026-10-13",
headers=headers,
timeout=30,
)
data = res.json()
if not res.ok:
raise RuntimeError(f"{data['error']['code']}: {data['error']['message']}")
print(data)<?php
$ch = curl_init('https://mursilat.com/api/v2/numbers/cm1abcd2345efgh6789ijkl/stats?from=2026-10-07&to=2026-10-13');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'GET',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer ' . getenv('WASLA_API_KEY'),
],
]);
$data = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) { throw new Exception($data['error']['code'] . ': ' . $data['error']['message']); }
print_r($data);Response
200Example
{
"numberId": "cm1abcd2345efgh6789ijkl",
"timezone": "Africa/Cairo",
"granularity": "day",
"from": "2026-10-07",
"to": "2026-10-13",
"data": [
{
"date": "2026-10-13",
"sent": 52,
"delivered": 50,
"read": 31,
"failed": 0,
"replied": 12,
"optOuts": 0,
"newContacts": 20,
"replies": 32
}
]
}Response schema
Fields of the example answer. Expand objects and arrays.
responseobject6 fields
- numberIdstring "cm1abcd2345efgh6789ijkl"
- timezonestring "Africa/Cairo"
- granularitystring "day"
- fromstring "2026-10-07"
- tostring "2026-10-13"
dataarray1 items
[0]object9 fields
- datestring "2026-10-13"
- sentinteger 52
- deliveredinteger 50
- readinteger 31
- failedinteger 0
- repliedinteger 12
- optOutsinteger 0
- newContactsinteger 20
- repliesinteger 32
Errors
Besides the authentication, rate-limit and validation errors every endpoint can return:
- 400STATS_RANGE_INVALIDInvalid date range.
Try it
Send this request from your browser to the Mursilat API.
documented examplePreview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.
Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (read only)
Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.