The API supports two authentication methods:
- User Token: For regular endpoints, use the
Authorizationheader with the user's token value. - Admin Token: For admin endpoints (/admin/**), use the
Authorizationheader with the admin token value (set in WUZAPI_ADMIN_TOKEN).
- Content-Type: application/json (JSON-encoded body)
- Authentication: Include the
Authorizationheader in all requests.
The following admin-only endpoints are used to manage users in the system. All require the Authorization header with the admin token (WUZAPI_ADMIN_TOKEN).
GET /admin/users
Returns a list of registered users.
Example Request:
curl -s -X GET -H 'Authorization: {{WUZAPI_ADMIN_TOKEN}}' http://localhost:8080/admin/users
Response:
[
{
"id": 1,
"name": "admin",
"token": "H4Zbhwr72PBrtKdTIgS",
"webhook": "https://example.com/webhook",
"jid": "5491155553934@s.whatsapp.net",
"qrcode": "",
"connected": true,
"expiration": 0,
"events": "Message,ReadReceipt"
}
]POST /admin/users
Adds a new user
Example Request:
curl -s -X POST -H 'Authorization: {{WUZAPI_ADMIN_TOKEN}}' -H 'Content-Type: application/json' --data '{"name":"usuario2","token":"token2","webhook":"https://example.com/webhook2","events":"Message,ReadReceipt"}' http://localhost:8080/admin/users
Response:
{
"id": 2
}You can create a user with optional proxy and S3 storage configuration. All fields are optional and backward compatible. If you do not provide these fields, the user will be created with default settings.
{
"name": "test_user",
"token": "user_token",
"proxyConfig": {
"enabled": true,
"proxyURL": "socks5://user:pass@host:port"
},
"s3Config": {
"enabled": true,
"endpoint": "https://s3.amazonaws.com",
"region": "us-east-1",
"bucket": "my-bucket",
"accessKey": "AKIAIOSFODNN7EXAMPLE",
"secretKey": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
"pathStyle": false,
"publicURL": "https://cdn.yoursite.com",
"mediaDelivery": "both",
"retentionDays": 30
}
}proxyConfig(object, optional):enabled(boolean): Enable proxy for this user.proxyURL(string): Proxy URL (e.g.,socks5://user:pass@host:port).
s3Config(object, optional):enabled(boolean): Enable S3 storage for this user.endpoint(string): S3 endpoint URL.region(string): S3 region.bucket(string): S3 bucket name.accessKey(string): S3 access key.secretKey(string): S3 secret key.pathStyle(boolean): Use path style addressing.publicURL(string): Public URL for accessing files.mediaDelivery(string): Media delivery type (base64,s3, orboth).retentionDays(integer): Number of days to retain files.
If you omit proxyConfig or s3Config, the user will be created without proxy or S3 integration, maintaining full backward compatibility.
DELETE /admin/users/{id}
Deletes one user from the system by ID
Example Request:
curl -s -X DELETE -H 'Authorization: {{WUZAPI_ADMIN_TOKEN}}' http://localhost:8080/admin/users/2
Response:
{
"Details": "User deleted successfully"
}The following webhook endpoints are used to get or set the webhook that will be called whenever a message or event is received. Available event types are:
- Message
- ReadReceipt
- HistorySync
- ChatPresence
Configures the webhook to be called using POST whenever a subscribed event occurs.
Endpoint: /webhook
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"webhookURL":"https://some.server/webhook"}' http://localhost:8080/webhook
Response:
{
"code": 200,
"data": {
"webhook": "https://example.net/webhook"
},
"success": true
}Retrieves the configured webhook and subscribed events.
Endpoint: /webhook
Method: GET
curl -s -X GET -H 'Token: 1234ABCD' http://localhost:8080/webhook
Response:
{
"code": 200,
"data": {
"subscribe": [ "Message" ],
"webhook": "https://example.net/webhook"
},
"success": true
}The following session endpoints are used to start a session to Whatsapp servers in order to send and receive messages
Connects to Whatsapp servers. If is there no existing session it will initiate a QR scan that can be retrieved via the /session/qr endpoint. You can subscribe to different types of messages so they are POSTED to your configured webhook. Available message types to subscribe to are:
- Message
- ReadReceipt
- HistorySync
- ChatPresence
If you set Immediate to false, the action will wait 10 seconds to verify a successful login. If Immediate is not set or set to true, it will return immedialty, but you will have to check shortly after the /session/status as your session might be disconnected shortly after started if the session was terminated previously via the phone/device.
Endpoint: /session/connect
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Subscribe":["Message"],"Immediate":false}' http://localhost:8080/session/connect
Response:
{
"code": 200,
"data": {
"details": "Connected!",
"events": "Message",
"jid": "5491155554444.0:52@s.whatsapp.net",
"webhook": "http://some.site/webhook?token=123456"
},
"success": true
}Disconnects from Whatsapp servers, keeping the session active. This means that if you /session/connect again, it will reuse the session and won't require a QR code rescan.
Endpoint: /session/disconnect
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' http://localhost:8080/session/disconnect
Response:
{
"code": 200,
"data": {
"Details": "Disconnected"
},
"success": true
}Disconnects from whatsapp websocket and finishes the session (so it will be required to scan a QR code the next time a connection is initiated)
Endpoint: /session/logout
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' http://localhost:8080/session/logout
Response:
{
"code": 200,
"data": {
"Details": "Logged out"
},
"success": true
}
Retrieve status (IsConnected means websocket connection is initiated, IsLoggedIn means QR code was scanned and session is ready to receive/send messages)
If its not logged in, you can use the /session/qr endpoint to get the QR code to scan
Endpoint: /session/status
Method: GET
curl -s -H 'Token: 1234ABCD' http://localhost:8080/session/status
Response:
{
"code": 200,
"data": {
"Connected": true,
"LoggedIn": true
},
"success": true
}
Retrieves QR code, session must be connected to Whatsapp servers and logged in must be false in order for the QR code to be generated. The generated code will be returned encoded in base64 embedded format.
Endpoint: /session/qr
Method: GET
curl -s -H 'Token: 1234ABCD' http://localhost:8080/session/qr
Response:
{
"code": 200,
"data": {
"QRCode": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAQAAAAEAAQMAAABmvDolAAAABlBMVEX///8AAABVwtN+AAAEw0lEQVR42uyZ..."
},
"success": true
}The following user endpoints are used to gather information about Whatsapp users.
Gets information for users on Whatsapp
Endpoint: /user/info
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":["5491155554445","5491155554444"]}' http://localhost:8080/user/info
Response:
{
"code": 200,
"data": {
"Users": {
"5491155554445@s.whatsapp.net": {
"Devices": [],
"PictureID": "",
"Status": "",
"VerifiedName": null
},
"5491155554444@s.whatsapp.net": {
"Devices": [
"5491155554444.0:0@s.whatsapp.net",
"5491155554444.0:11@s.whatsapp.net"
],
"PictureID": "",
"Status": "",
"VerifiedName": {
"Certificate": {
"details": "CP7t782FIRIGc21iOndeshIghUcml4b2NvbQ==",
"signature": "e35Fd320dccNmaBdNw+Yqtz1Q5545XpT9PpSlntqwaXpj1boOrQUnq9TNhYzGtgPWznTjRl7kHEBQ=="
},
"Details": {
"issuer": "smb:wa",
"serial": 23810327841439764000,
"verifiedName": "Great Company"
}
}
}
}
},
"success": true
}Checks if phone numbers are registered as Whatsapp users
Endpoint: /user/check
Method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":["5491155554445","5491155554444"]}' http://localhost:8080/user/check
Response:
{
"code": 200,
"data": {
"Users": [
{
"IsInWhatsapp": true,
"JID": "5491155554445@s.whatsapp.net",
"Query": "5491155554445",
"VerifiedName": "Company Name"
},
{
"IsInWhatsapp": false,
"JID": "5491155554444@s.whatsapp.net",
"Query": "5491155554444",
"VerifiedName": ""
}
]
},
"success": true
}Gets information about users profile pictures on WhatsApp, either a thumbnail (Preview=true) or full picture.
Endpoint: /user/avatar
Method: GET
curl -s -X GET -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554445","Preview":true]}' http://localhost:8080/user/avatar
Response:
{
"URL": "https://pps.whatsapp.net/v/t61.24694-24/227295214_112447507729487_4643695328050510566_n.jpg?stp=dst-jpg_s96x96&ccb=11-4&oh=ja432434a91e8f41d86d341bx889c217&oe=543222A4",
"ID": "1645308319",
"Type": "preview",
"DirectPath": "/v/t61.24694-24/227295214_112447507729487_4643695328050510566_n.jpg?stp=dst-jpg_s96x96&ccb=11-4&oh=ja432434a91e8f41d86d341ba889c217&oe=543222A4"
}Gets all contacts for the account.
Endpoint: /user/contacts
Method: GET
curl -s -X GET -H 'Token: 1234ABCD' http://localhost:8080/user/contacts
Response:
{
"code": 200,
"data": {
"5491122223333@s.whatsapp.net": {
"BusinessName": "",
"FirstName": "",
"Found": true,
"FullName": "",
"PushName": "FOP2"
},
"549113334444@s.whatsapp.net": {
"BusinessName": "",
"FirstName": "",
"Found": true,
"FullName": "",
"PushName": "Asternic"
}
}
}The following chat endpoints are used to send messages or mark them as read or indicating composing/not composing presence. The sample response is listed only once, as it is the same for all message types.
Sends a text message or reply. For replies, ContextInfo data should be completed with the StanzaID (ID of the message we are replying to), and Participant (user JID we are replying to). If ID is ommited, a random message ID will be generated.
Endpoint: /chat/send/text
Method: POST
Example sending a new message:
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Body":"Hellow Meow", "Id": "90B2F8B13FAC8A9CF6B06E99C7834DC5"}' http://localhost:8080/chat/send/text
Example replying to some message:
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Body":"Ditto","ContextInfo":{"StanzaId":"AA3DSE28UDJES3","Participant":"5491155553935@s.whatsapp.net"}}' http://localhost:8080/chat/send/text
Response:
{
"code": 200,
"data": {
"Details": "Sent",
"Id": "90B2F8B13FAC8A9CF6B06E99C7834DC5",
"Timestamp": "2022-04-20T12:49:08-03:00"
},
"success": true
}Sends a template message or reply. Template messages can contain call to action buttons: up to three quick replies, call button, and link button.
Endpoint: /chat/send/template
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Content":"Template content","Footer":"Some footer text","Buttons":[{"DisplayText":"Yes","Type":"quickreply"},{"DisplayText":"No","Type":"quickreply"},{"DisplayText":"Visit Site","Type":"url","Url":"https://www.fop2.com"},{"DisplayText":"Llamame","Type":"call","PhoneNumber":"1155554444"}]}' http://localhost:8080/chat/send/template
Sends an Audio message. Audio must be in Opus format and base64 encoded in embedded format.
Endpoint: /chat/send/audio
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Audio":"data:audio/ogg;base64,T2dnUw..."}' http://localhost:8080/chat/send/audio
Sends an Image message. Image must be in png or jpeg and base64 encoded in embedded format. You can optionally specify a text Caption
Endpoint: /chat/send/image
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Caption":"Look at this", "Image":"data:image/jpeg;base64,iVBORw0KGgoAAAANSU..."}' http://localhost:8080/chat/send/image
Sends a Document message. Any mime type can be attached. A FileName must be supplied in the request body. The Document must be passed as octet-stream in base64 embedded format.
Endpoint: /chat/send/document
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","FileName":"hola.txt","Document":"data:application/octet-stream;base64,aG9sYSBxdWUgdGFsCg=="}' http://localhost:8080/chat/send/document
Sends a Video message. Video must be in mp4 or 3gpp and base64 encoded in embedded format. You can optionally specify a text Caption and a JpegThumbnail
Endpoint: /chat/send/video
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Caption":"Look at this", "Video":"data:image/jpeg;base64,iVBORw0KGgoAAAANSU..."}' http://localhost:8080/chat/send/video
Sends a Sticker message. Sticker must be in image/webp format and base64 encoded in embedded format. You can optionally specify a PngThumbnail
Endpoint: /chat/send/sticker
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","PngThumbnail":"VBORgoAANSU=", "Sticker":"data:image/jpeg;base64,iVBORw0KGgoAAAANSU..."}' http://localhost:8080/chat/send/sticker
Sends a Location message. Latitude and Longitude must be passed, with an optional Name
Endpoint: /chat/send/location
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Latitude":48.858370,"Longitude":2.294481,"Phone":"5491155554444","Name":"Paris"}' http://localhost:8080/chat/send/location
Sends a Contact message. Both Vcard and Name body parameters are mandatory.
Endpoint: /chat/send/contact
Method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Name":"Casa","Vcard":"BEGIN:VCARD\nVERSION:3.0\nN:Doe;John;;;\nFN:John Doe\nORG:Example.com Inc.;\nTITLE:Imaginary test person\nEMAIL;type=INTERNET;type=WORK;type=pref:johnDoe@example.org\nTEL;type=WORK;type=pref:+1 617 555 1212\nTEL;type=WORK:+1 (617) 555-1234\nTEL;type=CELL:+1 781 555 1212\nTEL;type=HOME:+1 202 555 1212\nitem1.ADR;type=WORK:;;2 Enterprise Avenue;Worktown;NY;01111;USA\nitem1.X-ABADR:us\nitem2.ADR;type=HOME;type=pref:;;3 Acacia Avenue;Hoitem2.X-ABADR:us\nEND:VCARD"}' http://localhost:8080/chat/send/contact
Sends indication if you are writing/composing a text or audio message to the other party. possible states are "composing" and "paused". if media is set to "audio" it will indicate an audio message is being recorded.
endpoint: /chat/presence
method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","State":"composing","Media":""}' http://localhost:8080/chat/presence
Indicates that one or more messages were read. Id is an array of messages Ids. Chat must always be set to the chat ID (user ID in DMs and group ID in group chats). Sender must be set in group chats and must be the user ID who sent the message.
endpoint: /chat/markread
method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Id":["AABBCCDD112233","IIOOPPLL43332"]","Chat":"5491155553934.0:1@s.whatsapp.net"}' http://localhost:8080/chat/markread
Sends a reaction for an existing message. Id is the message Id to react to, if its your own message, prefix the Id with the string 'me:'
endpoint: /chat/react
method: POST
curl -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Phone":"5491155554444","Body":"❤️","Id":"me:069EDE53E81CB5A4773587FB96CB3ED3"}' http://localhost:8080/chat/react
Downloads an Image from a message and retrieves it Base64 media encoded. Required request parameters are: Url, MediaKey, Mimetype, FileSHA256 and FileLength
endpoint: /chat/downloadimage
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Url":"https://mmg.whatsapp.net/d/f/Apah954sUug5I9GnQsmXKPUdUn3ZPKGYFnscJU02dpuD.enc","Mimetype":"image/jpeg", "FileSHA256":"nMthnfkUWQiMfNJpA6K9+ft+Dx9Mb1STs+9wMHjeo/M=","FileLength":2039,"MediaKey":"vq0RR0nYGkxm2HrpwUp3sK8A7Nr1KUcOiBHrT1hg+PU=","FileEncSHA256":"6bMVZ5dRf9JKxJSUgg4w1h3iSYA3dM8gEQxaMPwoONc="}' http://localhost:8080/chat/downloadimage
Downloads a Video from a message and retrieves it Base64 media encoded. Required request parameters are: Url, MediaKey, Mimetype, FileSHA256 and FileLength
endpoint: /chat/downloadvideo
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Url":"https://mmg.whatsapp.net/d/f/Apah954sUug5I9GnQsmXKPUdUn3ZPKGYFnscJU02dpuD.enc","Mimetype":"video/mp4", "FileSHA256":"nMthnfkUWQiMfNJpA6K9+ft+Dx9Mb1STs+9wMHjeo/M=","FileLength":2039,"MediaKey":"vq0RR0nYGkxm2HrpwUp3sK8A7Nr1KUcOiBHrT1hg+PU=","FileEncSHA256":"6bMVZ5dRf9JKxJSUgg4w1h3iSYA3dM8gEQxaMPwoONc="}' http://localhost:8080/chat/downloadvideo
Downloads an Audio from a message and retrieves it Base64 media encoded. Required request parameters are: Url, MediaKey, Mimetype, FileSHA256 and FileLength
endpoint: /chat/downloadaudio
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Url":"https://mmg.whatsapp.net/d/f/Apah954sUug5I9GnQsmXKPUdUn3ZPKGYFnscJU02dpuD.enc","Mimetype":"audio/ogg; codecs=opus", "FileSHA256":"nMthnfkUWQiMfNJpA6K9+ft+Dx9Mb1STs+9wMHjeo/M=","FileLength":2039,"MediaKey":"vq0RR0nYGkxm2HrpwUp3sK8A7Nr1KUcOiBHrT1hg+PU=","FileEncSHA256":"6bMVZ5dRf9JKxJSUgg4w1h3iSYA3dM8gEQxaMPwoONc="}' http://localhost:8080/chat/downloadaudio
Downloads a Document from a message and retrieves it Base64 media encoded. Required request parameters are: Url, MediaKey, Mimetype, FileSHA256 and FileLength
endpoint: /chat/downloaddocument
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"Url":"https://mmg.whatsapp.net/d/f/Apah954sUug5I9GnQsmXKPUdUn3ZPKGYFnscJU02dpuD.enc","Mimetype":"application/pdf", "FileSHA256":"nMthnfkUWQiMfNJpA6K9+ft+Dx9Mb1STs+9wMHjeo/M=","FileLength":2039,"MediaKey":"vq0RR0nYGkxm2HrpwUp3sK8A7Nr1KUcOiBHrT1hg+PU=","FileEncSHA256":"6bMVZ5dRf9JKxJSUgg4w1h3iSYA3dM8gEQxaMPwoONc="}' http://localhost:8080/chat/downloaddocument
The following group endpoints are used to gather information or perfrom actions in chat groups.
Returns complete list of subscribed groups
endpoint: /group/list
method: GET
curl -s -X GET -H 'Token: 1234ABCD' http://localhost:8080/group/list
Response:
{
"code": 200,
"data": {
"Groups": [
{
"AnnounceVersionID": "1650572126123738",
"DisappearingTimer": 0,
"GroupCreated": "2022-04-21T17:15:26-03:00",
"IsAnnounce": false,
"IsEphemeral": false,
"IsLocked": false,
"JID": "120362023605733675@g.us",
"Name": "Super Group",
"NameSetAt": "2022-04-21T17:15:26-03:00",
"NameSetBy": "5491155554444@s.whatsapp.net",
"OwnerJID": "5491155554444@s.whatsapp.net",
"ParticipantVersionID": "1650234126145738",
"Participants": [
{
"IsAdmin": true,
"IsSuperAdmin": true,
"JID": "5491155554444@s.whatsapp.net"
},
{
"IsAdmin": false,
"IsSuperAdmin": false,
"JID": "5491155553333@s.whatsapp.net"
},
{
"IsAdmin": false,
"IsSuperAdmin": false,
"JID": "5491155552222@s.whatsapp.net"
}
],
"Topic": "",
"TopicID": "",
"TopicSetAt": "0001-01-01T00:00:00Z",
"TopicSetBy": ""
}
]
},
"success": true
}Gets the invite link for a group
endpoint: /group/invitelink
method: GET
curl -s -X GET -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"GroupJID":"120362023605733675@g.us"}' http://localhost:8080/group/invitelink
Response:
{
"code": 200,
"data": {
"InviteLink": "https://chat.whatsapp.com/HffXhYmzzyJGec61oqMXiz"
},
"success": true
}Retrieves information about a specific group
endpoint: /group/info
method: GET
curl -s -X GET -H 'Token: 1234ABCD' -H 'Content-Type: application/json' --data '{"GroupJID":"120362023605733675@g.us"}' http://localhost:8080/group/info
Response:
{
"code": 200,
"data": {
"AnnounceVersionID": "1650572126123738",
"DisappearingTimer": 0,
"GroupCreated": "2022-04-21T17:15:26-03:00",
"IsAnnounce": false,
"IsEphemeral": false,
"IsLocked": false,
"JID": "120362023605733675@g.us",
"Name": "Super Group",
"NameSetAt": "2022-04-21T17:15:26-03:00",
"NameSetBy": "5491155554444@s.whatsapp.net",
"OwnerJID": "5491155554444@s.whatsapp.net",
"ParticipantVersionID": "1650234126145738",
"Participants": [
{
"IsAdmin": true,
"IsSuperAdmin": true,
"JID": "5491155554444@s.whatsapp.net"
},
{
"IsAdmin": false,
"IsSuperAdmin": false,
"JID": "5491155553333@s.whatsapp.net"
},
{
"IsAdmin": false,
"IsSuperAdmin": false,
"JID": "5491155552222@s.whatsapp.net"
}
],
"Topic": "",
"TopicID": "",
"TopicSetAt": "0001-01-01T00:00:00Z",
"TopicSetBy": ""
},
"success": true
}Allows you to change a group photo/image. WhatsApp only accepts JPEG format for group photos.
endpoint: /group/photo
method: POST
Parameters:
GroupJID: The JID of the groupImage: Base64 encoded JPEG image data with data URL format (must be "data:image/jpeg;base64,...")
Important Notes:
- Only JPEG format is supported (WhatsApp requirement)
- Image will be automatically resized if too large
- Transparent images will be converted to JPEG with white background
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"GroupJID":"120362023605733675@g.us","Image":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD..."}' http://localhost:8080/group/photo
Response:
{
"code": 200,
"data": {
"Details": "Group Photo set successfully",
"PictureID": "122233212312"
},
"success": true
}Allows you to change a group name
endpoint: /group/name
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"GroupJID":"120362023605733675@g.us","Name":"New Group Name"}' http://localhost:8080/group/name
Response:
{
"code": 200,
"data": {
"Details": "Group Name set successfully"
},
"success": true
}Creates a new WhatsApp group with specified name and participants
endpoint: /group/create
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"name":"My New Group","participants":["5491155553934","5491155553935"]}' http://localhost:8080/group/create
Response:
{
"code": 200,
"data": {
"JID": "120363123456789@g.us",
"Name": "My New Group",
"OwnerJID": "5491155554444@s.whatsapp.net",
"GroupCreated": "2023-12-01T10:00:00Z",
"Participants": [
{
"IsAdmin": true,
"IsSuperAdmin": true,
"JID": "5491155554444@s.whatsapp.net"
},
{
"IsAdmin": false,
"IsSuperAdmin": false,
"JID": "5491155553934@s.whatsapp.net"
}
]
},
"success": true
}Configures whether only admins can modify group info (locked) or all participants can modify (unlocked)
endpoint: /group/locked
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"groupjid":"120362023605733675@g.us","locked":true}' http://localhost:8080/group/locked
Response:
{
"code": 200,
"data": {
"Details": "Group locked setting updated successfully"
},
"success": true
}Configures ephemeral/disappearing messages for the group. Messages will automatically disappear after the specified duration.
endpoint: /group/ephemeral
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"groupjid":"120362023605733675@g.us","duration":"24h"}' http://localhost:8080/group/ephemeral
Valid duration values:
"24h"- 24 hours"7d"- 7 days"90d"- 90 days"off"- Disable disappearing messages
Response:
{
"code": 200,
"data": {
"Details": "Disappearing timer set successfully"
},
"success": true
}Removes the current photo/image from the specified WhatsApp group
endpoint: /group/photo/remove
method: POST
curl -s -X POST -H 'Token: 1234ABCD' -H 'Content-Type: application/json' -d '{"groupjid":"120362023605733675@g.us"}' http://localhost:8080/group/photo/remove
Response:
{
"code": 200,
"data": {
"Details": "Group photo removed successfully"
},
"success": true
}WuzAPI now supports S3-compatible storage for media files, allowing you to store WhatsApp media (images, videos, audio, and documents) in cloud storage services instead of or in addition to base64 encoding in webhooks.
- Multi-tenant Support: Each user can configure their own S3 storage
- Multiple Providers: Support for AWS S3, MinIO, Backblaze B2, and other S3-compatible services
- Flexible Delivery: Choose between base64, S3 URL, or both in webhooks
- Automatic Organization: Files are organized by user, contact, date, and media type
- Public Access: Media files are stored with public-read permissions for easy preview
- Retention Management: Configurable retention period with automatic expiration
- CDN Support: Option to use custom public URLs for CDN integration
POST /session/s3/config
Configure S3 storage settings for the authenticated user.
Request Body:
{
"enabled": true,
"endpoint": "https://s3.amazonaws.com",
"region": "us-east-1",
"bucket": "my-whatsapp-media",
"access_key": "AKIAIOSFODNN7EXAMPLE",
"secret_key": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
"path_style": false,
"public_url": "https://cdn.example.com",
"media_delivery": "both",
"retention_days": 30
}Parameters:
enabled: Enable/disable S3 storageendpoint: S3 endpoint URL (leave empty for AWS S3)region: S3 regionbucket: S3 bucket nameaccess_key: S3 access key IDsecret_key: S3 secret access keypath_style: Use path-style URLs (required for MinIO)public_url: Custom public URL for accessing files (optional)media_delivery: Delivery method - "base64", "s3", or "both"retention_days: Days to retain files (0 for no expiration)
GET /session/s3/config
Retrieve current S3 configuration (access key is masked).
Response:
{
"code": 200,
"data": {
"enabled": true,
"endpoint": "https://s3.amazonaws.com",
"region": "us-east-1",
"bucket": "my-whatsapp-media",
"access_key": "***",
"path_style": false,
"public_url": "",
"media_delivery": "both",
"retention_days": 30
},
"success": true
}POST /session/s3/test
Test S3 connection with current configuration.
Response:
{
"code": 200,
"data": {
"Details": "S3 connection test successful",
"Bucket": "my-whatsapp-media",
"Region": "us-east-1"
},
"success": true
}DELETE /session/s3/config
Remove S3 configuration and revert to base64-only delivery.
{
"enabled": true,
"endpoint": "",
"region": "us-east-1",
"bucket": "my-bucket",
"access_key": "AKIAIOSFODNN7EXAMPLE",
"secret_key": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
"path_style": false,
"media_delivery": "s3",
"retention_days": 30
}{
"enabled": true,
"endpoint": "https://minio.example.com",
"region": "us-east-1",
"bucket": "whatsapp-media",
"access_key": "minioadmin",
"secret_key": "minioadmin",
"path_style": true,
"media_delivery": "both",
"retention_days": 0
}{
"enabled": true,
"endpoint": "https://s3.us-west-004.backblazeb2.com",
"region": "us-west-004",
"bucket": "my-b2-bucket",
"access_key": "0004b0000000000000000000001",
"secret_key": "K004XXXXXXXXXXXXXXXXXXXXXXXX",
"path_style": false,
"media_delivery": "s3",
"retention_days": 90
}Media files are stored in S3 with the following structure:
users/{user_id}/{inbox|outbox}/{contact_jid}/{year}/{month}/{day}/{media_type}/{message_id}.{ext}
Example:
users/abc123/inbox/5491155553934_s.whatsapp.net/2024/12/25/images/3EB06F9067F80BAB89FF.jpg
When S3 is enabled, webhook payloads will include S3 information based on the media_delivery setting:
{
"event": {
"Info": { ... },
"Message": { ... }
},
"s3": {
"url": "https://my-bucket.s3.us-east-1.amazonaws.com/users/abc123/inbox/...",
"key": "users/abc123/inbox/5491155553934/2024/12/25/images/3EB06F9067F80BAB89FF.jpg",
"bucket": "my-bucket",
"size": 245632,
"mimeType": "image/jpeg",
"fileName": "3EB06F9067F80BAB89FF.jpg"
}
}{
"event": { ... },
"base64": "/9j/4AAQSkZJRgABAQAAAQ...",
"mimeType": "image/jpeg",
"fileName": "3EB06F9067F80BAB89FF.jpg",
"s3": {
"url": "https://my-bucket.s3.us-east-1.amazonaws.com/users/abc123/inbox/...",
"key": "users/abc123/inbox/5491155553934/2024/12/25/images/3EB06F9067F80BAB89FF.jpg",
"bucket": "my-bucket",
"size": 245632,
"mimeType": "image/jpeg",
"fileName": "3EB06F9067F80BAB89FF.jpg"
}
}Ensure your S3 bucket has the appropriate policy for public read access:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PublicReadGetObject",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::my-bucket/*"
}
]
}-
Security: Store S3 credentials securely. They are encrypted in the database but should still be treated as sensitive.
-
Costs: S3 storage and bandwidth costs apply based on your provider's pricing.
-
Performance: S3 upload is synchronous. Large files may slightly delay webhook delivery.
-
Fallback: If S3 upload fails, the webhook is still sent (without S3 data if
media_deliveryis "s3" only). -
Retention: Files are automatically deleted after the retention period if set. Use 0 for permanent storage.
-
Public Access: Files are stored with public-read permissions. Do not use this for sensitive data without additional security measures.
To migrate from base64-only to S3 storage:
- Configure S3 with
media_delivery: "both"initially - Update your webhook handler to support both formats
- Test thoroughly with various media types
- Switch to
media_delivery: "s3"once confirmed working - Update webhook handler to use S3 URLs exclusively
- Verify credentials are correct
- Check bucket exists and is accessible
- Ensure region is correct
- For MinIO, ensure
path_style: trueis set
- Check bucket policy allows public read
- Verify CORS settings if accessing from browser
- Ensure
public_urlis correct if using CDN
- Check
media_deliverysetting - Verify S3 is enabled
- Check logs for upload errors
- Test S3 connection
Starting from version X.X.X, you can choose the format for sending webhook data using the WEBHOOK_FORMAT environment variable.
form(default): Sends data asapplication/x-www-form-urlencoded, with the JSON in thejsonDatafield and the token in thetokenfield.json: Sends data asapplication/json, with the full event JSON as the body and thetokenfield included.
In your terminal, set the variable before starting the service:
export WEBHOOK_FORMAT=json # or "form" for the defaultForm mode (default):
POST /webhook
Content-Type: application/x-www-form-urlencoded
jsonData={...json...}&token=YOUR_TOKEN
JSON mode:
POST /webhook
Content-Type: application/json
{
"event": {...},
"type": "ReadReceipt",
...
"token": "YOUR_TOKEN"
}
- The
formmode ensures compatibility with legacy or older webhook systems. - The
jsonmode is recommended for modern integrations and easier backend parsing. - If you do not set the variable, the system will use
formmode by default.