API reference

Webhooks

Real-time events signed with HMAC-SHA256 (X-Wasla-Signature: t=…,v1=…), retried for about an hour. One account-level URL for all numbers, and/or one per number. The delivery log keeps metadata only (7 days).

Endpoints

• GET/v2/webhooks/eventsEvent catalogScope: webhooks:read
• GET/v2/webhookAccount webhookScope: webhooks:read
• PUT/v2/webhookSet the account webhookScope: webhooks:write
• DELETE/v2/webhookRemove the account webhookScope: webhooks:write
• POST/v2/webhook/testSend a test eventScope: webhooks:write
• POST/v2/webhook/rotate-secretRotate the account webhook secretScope: webhooks:write
• GET/v2/webhooks/deliveriesDelivery logScope: webhooks:read
• GET/v2/webhooks/deliveries/{deliveryId}One deliveryScope: webhooks:read
• POST/v2/webhooks/deliveries/{deliveryId}/redeliverRedeliver (retry window)Scope: webhooks:write