Webhooks
Account webhook
GET
/v2/webhook- Scope:
webhooks:read - Idempotency-Key:not used
- read only
One URL for every number.
Parameters
Headers
| Name | Type | Constraints | Description |
|---|---|---|---|
X-Request-Idoptional | Typestring | Constraints— | DescriptionOptional: your own request id, echoed back (otherwise we generate req_…). Quote it to support. |
Request
curl -X GET "https://mursilat.com/api/v2/webhook" \
-H "Authorization: Bearer $WASLA_API_KEY"const res = await fetch('https://mursilat.com/api/v2/webhook', {
method: 'GET',
headers: {
Authorization: `Bearer ${process.env.WASLA_API_KEY}`,
},
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.error.code}: ${data.error.message}`);
console.log(data);import os
import requests
headers = {"Authorization": f"Bearer {os.environ['WASLA_API_KEY']}"}
res = requests.get(
"https://mursilat.com/api/v2/webhook",
headers=headers,
timeout=30,
)
data = res.json()
if not res.ok:
raise RuntimeError(f"{data['error']['code']}: {data['error']['message']}")
print(data)<?php
$ch = curl_init('https://mursilat.com/api/v2/webhook');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'GET',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Authorization: Bearer ' . getenv('WASLA_API_KEY'),
],
]);
$data = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) { throw new Exception($data['error']['code'] . ': ' . $data['error']['message']); }
print_r($data);Response
200Example
{
"url": "https://example.com/mursilat",
"events": [
"message.received",
"message.status",
"interactive.reply",
"poll.vote",
"contact.opted_out",
"contact.opted_in",
"session.status",
"number.status",
"number.restricted",
"campaign.status",
"otp.verified",
"conversation.attributed"
],
"availableEvents": [
"message.received",
"message.status",
"interactive.reply",
"poll.vote",
"contact.opted_out",
"contact.opted_in",
"session.status",
"number.status",
"number.restricted",
"campaign.status",
"otp.verified",
"conversation.attributed"
],
"secretConfigured": true,
"disabledAt": null,
"disabledReason": null,
"apiVersion": "2026-10"
}Response schema
Fields of the example answer. Expand objects and arrays.
responseobject7 fields
- urlstring "https://example.com/mursilat"
eventsarray12 items
- [0]string "message.received"
availableEventsarray12 items
- [0]string "message.received"
- secretConfiguredboolean true
- disabledAtnull null
- disabledReasonnull null
- apiVersionstring "2026-10"
Errors
Only the common authentication, rate-limit and validation errors.
Try it
Send this request from your browser to the Mursilat API.
documented examplePreview — this copy of the docs isn’t on mursilat.com, so the console shows the documented example instead of calling the API.
Real requests use your real number and plan: they can send WhatsApp messages, spend quota and delete data. (read only)
Kept only in this tab’s memory: never saved, never put in the URL, sent only to mursilat.com. Reloading the page forgets it.
curl -X GET 'https://mursilat.com/api/v2/webhook' \
-H "Authorization: Bearer $WASLA_API_KEY" \
-H 'Accept: application/json'