Wapiworld REST API

Base URL: https://api.wapiworld.com. The OpenAPI document is the machine-readable endpoint contract.

Authentication

Create a project-scoped API key in the dashboard and send its secret with HTTP Basic authentication. Never put credentials in URLs, logs, screenshots, prompts, or webhook payloads.

Core resources

• Projects group tenant-scoped operations.
• Instances represent WhatsApp sender connections.
• Webhook subscriptions deliver configured events.
• Keys authorize only their configured project and resource scopes.

Recorded messages

Recorded content exists only when opt-in recording is enabled. It can contain third-party or restricted data and is deliberately excluded from public MCP and directory surfaces.

Errors and retries

A 401 means authentication is absent or invalid; 403 means the credential lacks permission; 404 means a tenant-scoped resource was not found; 429 means wait before retrying. A timeout or 5xx after a send is uncertain and must never trigger an automatic resend.