Developers

WhatsApp Business REST API — Production Ready, India Hosted

Send WhatsApp messages, manage templates, receive webhook events and run campaigns from your code in minutes. Bearer-token authentication, HMAC SHA-256 signed webhooks, dual-layer rate limiting and strict multi-tenant isolation — built for production from day one.

REST + JSONBearer AuthHMAC SHA-256 Webhooks1k req/min Burst99.9% Uptime SLAPartner API for Resellers
WhatsApp Business REST API — Production Ready, India Hosted

Built for engineers who ship

The Mappstore REST API v1 gives you everything the official WhatsApp Business Platform exposes — plus a layer of multi-tenant primitives, billing, drip scheduling, contact CRM and campaign analytics that most BSPs leave to you to build. Test in our sandbox, push to production with a single env variable change, and trust the same engine that already moves millions of WhatsApp messages a month for Indian businesses.

What the API can do

Every meaningful action in the Mappstore platform is exposed over a clean REST surface.

Send messages & templates

Send freeform session messages, approved templates with variables, media headers and interactive buttons via /v1/messages.

Manage flows & chatbots

Create, list, update and trigger VibeFlow chatbots and WhatsApp Flows for any of your tenants programmatically.

Contacts & CRM

CRUD contacts, sync from Shopify/Zoho/Tally/Google Sheets, attach tags, custom attributes and consent state.

Campaigns & analytics

Launch bulk campaigns, schedule drip sequences, query delivery, read and reply metrics with cursor-based pagination.

Wallet & billing

Read wallet balance, top up via Razorpay, fetch invoices, set low-balance webhooks, and manage subscriptions.

Webhooks

Receive HMAC SHA-256 signed JSON for messages, statuses, template approvals, wallet events and campaign completions.

Auth & security

Bearer tokens, scoped API keys, IP allow-listing, dual-layer rate limits, request signing and full audit logs.

Partner / Reseller API

Resellers get a separate /api/partner/v1 surface to manage child accounts, wallets, branding and webhook subscriptions.

SDKs & Postman

Postman collection, OpenAPI 3.1 spec and copy-paste cURL/Node/Python examples for every endpoint.

Get from zero to production in 4 steps

1

Sign up & onboard WABA

Create a Mappstore account and complete the 15-minute embedded WABA onboarding.

2

Generate an API key

Create a scoped Bearer key from Settings → Developers. Choose scopes: messages, templates, wallet, contacts.

3

Send a test message

POST /v1/messages with your token. Use the sandbox number to test without spending wallet credit.

4

Subscribe to webhooks

Register your webhook URL and HMAC secret. We'll POST signed JSON for every inbound message and status update.

Common API use cases

E-commerce backends

Trigger order confirmations, shipping updates, abandoned cart recovery and review requests directly from Shopify, Magento or custom carts.

SaaS notifications

Replace SMS OTP and transactional email with WhatsApp delivery — 5× higher open rate at a fraction of SMS cost.

Chatbot platforms

Build your own UI on top of Mappstore: we handle WABA, billing and infra; you keep the customer relationship.

Reseller / agency platforms

Use the Partner API to provision dozens of WABA tenants programmatically with white-label branding and consolidated billing.

Frequently asked questions

What authentication does the Mappstore WhatsApp API use?
Bearer-token authentication with scoped API keys. Each key carries scopes such as messages:write, templates:read, wallet:write so you can issue narrow-permission tokens to different services.
How does HMAC webhook signing work?
Every webhook payload is signed with HMAC SHA-256 using a secret you choose at registration. The signature is sent as the X-Mappstore-Signature header — verify it before trusting the body to prevent spoofing.
What are the rate limits?
Dual-layer: a per-account burst limit (default 1,000 requests / minute) and a steady-state quota that scales with your subscription tier. Headers X-RateLimit-Remaining and X-RateLimit-Reset are returned on every response.
Is there a sandbox?
Yes — every account gets a free sandbox WhatsApp number for testing message sends, templates and webhook delivery before pointing the API at your production WABA.
Do you support partner / reseller APIs?
Yes. Resellers get /api/partner/v1 endpoints to provision client accounts, top up wallets, fetch consolidated usage, and subscribe to partner-specific events like account.waba_connected and account.low_balance.
What languages and SDKs are supported?
The API is plain HTTPS + JSON, so any language works. We publish official Node.js and Python SDKs, a Postman collection and an OpenAPI 3.1 spec for code generation.
How is the WhatsApp REST API priced?
There are no per-call API fees. You pay the standard Mappstore subscription (₹999/month per WABA) plus the same per-message Meta conversation rates as the dashboard. The API is included free.

Get your WhatsApp API key in 5 minutes

Sign up, complete WABA onboarding and start sending messages from your code today.

Get API Key Browse API Reference