API Documentation

OTP Endpoints

{
  "session_id": "3bbaaf0b-3c11-44a2-8a7e-4edc426c5fcd",
  "expires_in": 300,
  "sent_via_engine": true
}

{
  "status": "verified",
  "phone": "6281234567890",
  "verified_at": "2026-02-05T12:00:00Z",
  "meta": {"user_id": "123"}
}

Messages API

Send custom WhatsApp messages beyond OTP.

curl -X POST https://api.loginwa.com/api/v1/messages/send \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phone":"6281234567890","message":"Hello from LoginWA!"}'

Devices API

Manage WhatsApp devices connected to your app.

// Response
{
  "devices": [
    {
      "id": "dev_abc123",
      "name": "My WhatsApp",
      "phone": "6281234567890",
      "status": "connected",
      "created_at": "2026-01-15T10:00:00Z"
    }
  ]
}

Broadcast API

Send bulk WhatsApp messages to multiple recipients with smart delay, scheduling, and progress tracking.

Broadcast Endpoints

Example: Create & Send Campaign

// 1. Create campaign
POST /api/v1/broadcast/campaigns
{
  "name": "Summer Sale 2026",
  "message": "Hello {name}!\n\nSpecial offer for you:\n- 50% discount\n- Free shipping\n\nClick: https://shop.com/promo",
  "contacts": [
    {"phone": "081234567890", "name": "Budi"},
    {"phone": "081234567891", "name": "Ani", "variables": {"city": "Jakarta"}},
    {"phone": "081234567892", "name": "Citra"}
  ],
  "delay_seconds": 5,
  "media_url": "https://example.com/promo.jpg",
  "media_type": "image"
}

// Response
{
  "success": true,
  "data": {
    "id": "camp_abc123xyz",
    "name": "Summer Sale 2026",
    "status": "draft",
    "total_contacts": 3,
    "estimated_duration": "15 seconds"
  }
}

// 2. Start sending
POST /api/v1/broadcast/campaigns/camp_abc123xyz/send

// 3. Check progress
GET /api/v1/broadcast/campaigns/camp_abc123xyz
{
  "success": true,
  "data": {
    "id": "camp_abc123xyz",
    "status": "sending",
    "progress": {
      "total": 3,
      "sent": 2,
      "delivered": 1,
      "failed": 0,
      "pending": 1,
      "percentage": 66.7
    }
  }
}

Webhooks API

Configure webhooks to receive real-time events (incoming messages, status updates, etc.).

{
  "event": "message.received",
  "timestamp": "2026-02-05T12:00:00Z",
  "data": {
    "message_id": "msg_abc123",
    "from": "6281234567890",
    "body": "Hello!",
    "device_id": "dev_xyz"
  }
}

Webhook Endpoints

Verifying Webhook Signatures

Each webhook includes a signature in the X-Webhook-Signature header. Verify it to ensure authenticity:

// PHP/Laravel example
$signature = $request->header('X-Webhook-Signature');
$payload = $request->getContent();
$secret = 'your_webhook_secret';

$expected = hash_hmac('sha256', $payload, $secret);

if (! hash_equals($expected, $signature)) {
    abort(403, 'Invalid signature');
}

SDKs & Downloads

Code Examples

$client = new \GuzzleHttp\Client();

// Send OTP
$res = $client->post('https://api.loginwa.com/api/v1/auth/start', [
    'headers' => [
        'Authorization' => 'Bearer ' . env('LOGINWA_API_KEY'),
        'Content-Type' => 'application/json',
    ],
    'json' => [
        'phone' => '6281234567890',
        'otp_length' => 6,
    ],
]);

$data = json_decode($res->getBody(), true);
$sessionId = $data['session_id'];

const BASE_URL = 'https://api.loginwa.com/api/v1';
const API_KEY = process.env.LOGINWA_API_KEY;

async function sendOtp(phone) {
    const res = await fetch(`${BASE_URL}/auth/start`, {
        method: 'POST',
        headers: {
            'Authorization': `Bearer ${API_KEY}`,
            'Content-Type': 'application/json',
        },
        body: JSON.stringify({ phone }),
    });
    
    if (!res.ok) throw new Error('Failed to send OTP');
    return res.json();
}

import requests
import os

BASE_URL = 'https://api.loginwa.com/api/v1'
API_KEY = os.environ.get('LOGINWA_API_KEY')

def send_otp(phone):
    res = requests.post(
        f'{BASE_URL}/auth/start',
        headers={
            'Authorization': f'Bearer {API_KEY}',
            'Content-Type': 'application/json',
        },
        json={'phone': phone}
    )
    res.raise_for_status()
    return res.json()

# Send OTP
curl -X POST https://api.loginwa.com/api/v1/auth/start \
  -H "Authorization: Bearer $LOGINWA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phone":"6281234567890"}'

# Verify OTP
curl -X POST https://api.loginwa.com/api/v1/auth/verify \
  -H "Authorization: Bearer $LOGINWA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"session_id":"xxx","otp_code":"123456"}'

Pricing Plans

Start free, then scale as you grow. All plans include full API access, Widget, SDK, Dashboard, Webhooks, and unlimited projects.

Need Help?

Having trouble with integration? We're here to help.