Authentication
All API requests are authenticated with an API key.
Generate an API key from Settings → API & webhooks. Pass it on every request in the Authorization header as a Bearer token (or use the x-api-keyheader). You don't need to send your phone number or WABA ID — those are resolved automatically from your connected WhatsApp account.
Header
Authorization
Authorization: Bearer br_live_xxxxxxxxxxxxxxxxKeep your key secret. Anyone with it can send messages from your account. If a key leaks, revoke it from the dashboard and generate a new one.