Dokumentasi API

Harga dalam USD. Base URL adalah https://api.loginwa.com (juga dapat diakses di https://loginwa.com/api). Endpoint berversi berada di bawah /api/v1/…; endpoint produk OTP adalah /api/auth/start & /api/auth/verify.

Endpoint OTP

Produk OTP WhatsApp. Endpoint ini memerlukan API key yang valid dan langganan aktif (dibatasi 60 permintaan/menit). Path yang disarankan: /api/auth/…. Alias yang kompatibel: /api/v1/auth/… (dipakai SDK; start juga mengembalikan sent_via_engine dan quota_remaining; verify mengembalikan phone bukan phone_number).

Setelah tautan atau rescan WhatsApp baru, ponsel bisa menampilkan “Waiting for this message”. Itu kunci sesi yang belum lengkap, bukan string OTP yang rusak. LoginWA tidak melihat placeholder itu; jika kiriman pertama tidak mendapat ack pengiriman dalam waktu singkat, kode OTP yang sama dikirim otomatis dari perangkat online lain di pool yang sama (pool platform, atau perangkat milik Anda jika ada dua atau lebih). Tombol Resend tetap ada. Dua pesan bisa sampai jika yang pertama baru terbaca belakangan.

{
  "session_id": "3bbaaf0b-3c11-44a2-8a7e-4edc426c5fcd",
  "expires_in": 300
}

{
  "status": "verified",
  "phone_number": "6281234567890"
}

API Pesan

Kirim pesan WhatsApp kustom di luar OTP. Jika perangkat pertama tidak mendapat ack pengiriman, LoginWA mengirim ulang pesan yang sama dari perangkat online Anda yang lain — bukan dari nomor orang lain.

curl -X POST https://api.loginwa.com/api/v1/messages/send \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phone":"6281234567890","message":"Hello from LoginWA!"}'

curl -X POST https://api.loginwa.com/api/v1/messages/send \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phone":"6281234567890","type":"image","media_url":"https://example.com/promo.jpg","caption":"Promo hari ini!"}'

{
  "success": true,
  "message_id": "3EB0538DA65B",
  "remote_jid": "[email protected]",
  "trace_id": "9f1c2e7a-1b3d-4f5a-9c8e-2a1b3c4d5e6f",
  "device_id": "dev_abc123",
  "phone": "6281234567890",
  "quota_remaining": 4987
}

curl -X POST https://api.loginwa.com/api/v1/messages/delete \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"message_id":"3EB0538DA65B","phone":"6281234567890"}'

{
  "success": true,
  "status": "revoked",
  "message_id": "3EB0538DA65B"
}

curl -X GET https://api.loginwa.com/api/v1/messages/3EB0538DA65B \
  -H "Authorization: Bearer YOUR_API_KEY"

curl -X POST https://api.loginwa.com/api/v1/numbers/check \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phones":["6281234567890","6289876543210"]}'

{
  "device_id": "dev_abc123",
  "results": [
    {"phone": "6281234567890", "registered": true,  "jid": "[email protected]"},
    {"phone": "6289876543210", "registered": false, "jid": null}
  ]
}

{
  "device_id": "dev_abc123",
  "groups": [
    {"id": "[email protected]", "subject": "Tim Marketing", "participants": 12, "is_announce": false}
  ]
}

Contoh Kode, Kirim Pesan

Memanggil POST /api/v1/messages/send dalam empat bahasa. Simpan API key di sisi server.

curl -X POST https://api.loginwa.com/api/v1/messages/send \
  -H "Authorization: Bearer $LOGINWA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "phone": "6281234567890",
    "message": "Hello from LoginWA!"
  }'

$client = new \GuzzleHttp\Client();

$res = $client->post('https://api.loginwa.com/api/v1/messages/send', [
    'headers' => [
        'Authorization' => 'Bearer ' . getenv('LOGINWA_API_KEY'),
        'Content-Type'  => 'application/json',
    ],
    'json' => [
        'phone'   => '6281234567890',
        'message' => 'Hello from LoginWA!',
    ],
]);

$data = json_decode((string) $res->getBody(), true);
echo $data['message_id'];

const res = await fetch(
  'https://api.loginwa.com/api/v1/messages/send',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LOGINWA_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      phone: '6281234567890',
      message: 'Hello from LoginWA!',
    }),
  }
);

if (!res.ok) throw new Error(`HTTP ${res.status}`);
const data = await res.json();
console.log(data.message_id);

import os, requests

res = requests.post(
    'https://api.loginwa.com/api/v1/messages/send',
    headers={
        'Authorization': f"Bearer {os.environ['LOGINWA_API_KEY']}",
        'Content-Type': 'application/json',
    },
    json={
        'phone': '6281234567890',
        'message': 'Hello from LoginWA!',
    },
)
res.raise_for_status()
print(res.json()['message_id'])

API Perangkat

Kelola perangkat WhatsApp yang terhubung ke app Anda. ID perangkat memakai engine_device_id (mis. dev_abc123). Pairing bersifat asinkron: membuat atau menyegarkan perangkat mengembalikan 202 dan Anda melakukan polling GET /api/v1/devices/{id} untuk token QR.

// Response 200
{
  "devices": [
    {
      "id": "dev_abc123",
      "label": "My WhatsApp",
      "status": "online",
      "phone_number": "6281234567890",
      "is_online": true,
      "last_seen_at": "2026-06-01T10:00:00+00:00",
      "created_at": "2026-01-15T10:00:00+00:00"
    }
  ],
  "count": 1
}

// Response 202
{
  "device_id": "dev_abc123",
  "engine_device_id": "dev_abc123",
  "label": "My WhatsApp",
  "status": "qr_waiting",
  "qr_code": "2@A1b2C3...",
  "job_id": "job_xyz",
  "qr_status_url": "https://api.loginwa.com/api/v1/devices/dev_abc123",
  "message": "Scan QR code with WhatsApp to connect device"
}

{
  "device_id": "dev_abc123",
  "pairing_code": "ABCD-1234",
  "expires_in": 60
}

API Broadcast

Kirim pesan WhatsApp massal ke banyak penerima dengan jeda cerdas, penjadwalan, dan pelacakan progres. Semua respons dibungkus dalam { "success": true, "data": … }.

Endpoint Broadcast

Contoh: Buat & Kirim Kampanye

// 1. Create campaign
POST /api/v1/broadcast/campaigns
{
  "name": "Summer Sale 2026",
  "message": "Hello {name}!\n\nSpecial offer for you:\n- 50% discount\n- Free shipping\n\nClick: https://shop.com/promo",
  "contacts": [
    {"phone": "081234567890", "name": "Budi"},
    {"phone": "081234567891", "name": "Ani", "variables": {"city": "Jakarta"}},
    {"phone": "081234567892", "name": "Citra"}
  ],
  "delay_seconds": 5,
  "media_url": "https://example.com/promo.jpg",
  "media_type": "image"
}

// Response
{
  "success": true,
  "data": {
    "id": "camp_abc123xyz",
    "name": "Summer Sale 2026",
    "status": "draft",
    "total_contacts": 3,
    "estimated_duration": "15 seconds"
  }
}

// 2. Start sending
POST /api/v1/broadcast/campaigns/camp_abc123xyz/send

// 3. Check progress
GET /api/v1/broadcast/campaigns/camp_abc123xyz
{
  "success": true,
  "data": {
    "id": "camp_abc123xyz",
    "status": "sending",
    "progress": {
      "total": 3,
      "sent": 2,
      "delivered": 1,
      "failed": 0,
      "pending": 1,
      "percentage": 66.7
    }
  }
}

API Webhook

Konfigurasikan webhook untuk menerima event real-time (pesan masuk, status pengiriman, event perangkat dan OTP). Setiap app dapat mendaftarkan hingga 5 webhook. Signing secret hanya ditampilkan sekali saat pembuatan dan melalui regenerate-secret.

{
  "event": "message.incoming",
  "timestamp": "2026-06-01T12:00:00+00:00",
  "data": {
    "message_id": "msg_abc123",
    "from": "6281234567890",
    "body": "Hello!",
    "device_id": "dev_xyz"
  }
}

Endpoint Webhook

Memverifikasi Tanda Tangan Webhook

Setiap pengiriman menyertakan tanda tangan di header X-LoginWA-Signature (HMAC-SHA256 dari body permintaan mentah). Verifikasi untuk memastikan keasliannya:

// PHP/Laravel example
$signature = $request->header('X-LoginWA-Signature');
$payload   = $request->getContent();
$secret    = 'your_webhook_secret';

$expected = hash_hmac('sha256', $payload, $secret);

if (! hash_equals($expected, (string) $signature)) {
    abort(403, 'Invalid signature');
}

API IP Whitelist

Batasi API key ke alamat IP sumber tertentu. Saat pembatasan aktif, permintaan dari IP yang tidak di-whitelist ditolak dengan 403 ip_not_allowed. Endpoint ini dikecualikan dari pemeriksaan IP agar Anda selalu dapat mengelola daftar Anda.

Auto-Reply & Chatbot

Balasan otomatis dan alur chatbot dikonfigurasi per app di Dashboard, tidak ada API terpisah untuk mengelolanya. Saat pesan masuk tiba, LoginWA mengevaluasi aturan Anda dan dapat membalas otomatis, lalu tetap mengirim event message.incoming ke webhook Anda agar logika Anda sendiri juga bisa berjalan.

Penagihan & pembayaran

Harga dalam USD. Paket dan kuota dikelola di Dashboard, bukan via API. Checkout memakai broker pembayaran Satuapps (kartu, QRIS, dan virtual account) sepenuhnya di UI penagihan; tidak ada API penagihan publik. Langganan yang tidak aktif, ditangguhkan, atau menunggak menyebabkan permintaan API mengembalikan 402 subscription_suspended.

SDK & Unduhan

Contoh Kode OTP

Mengirim OTP via POST /api/auth/start. Verifikasi dengan POST /api/auth/verify memakai session_id yang dikembalikan.

$client = new \GuzzleHttp\Client();

// Send OTP
$res = $client->post('https://api.loginwa.com/api/auth/start', [
    'headers' => [
        'Authorization' => 'Bearer ' . getenv('LOGINWA_API_KEY'),
        'Content-Type' => 'application/json',
    ],
    'json' => [
        'phone' => '6281234567890',
        'otp_length' => 6,
    ],
]);

$data = json_decode((string) $res->getBody(), true);
$sessionId = $data['session_id'];

const BASE_URL = 'https://api.loginwa.com/api';
const API_KEY = process.env.LOGINWA_API_KEY;

async function sendOtp(phone) {
    const res = await fetch(`${BASE_URL}/auth/start`, {
        method: 'POST',
        headers: {
            'Authorization': `Bearer ${API_KEY}`,
            'Content-Type': 'application/json',
        },
        body: JSON.stringify({ phone }),
    });

    if (!res.ok) throw new Error('Failed to send OTP');
    return res.json();
}

import requests
import os

BASE_URL = 'https://api.loginwa.com/api'
API_KEY = os.environ.get('LOGINWA_API_KEY')

def send_otp(phone):
    res = requests.post(
        f'{BASE_URL}/auth/start',
        headers={
            'Authorization': f'Bearer {API_KEY}',
            'Content-Type': 'application/json',
        },
        json={'phone': phone}
    )
    res.raise_for_status()
    return res.json()

# Send OTP
curl -X POST https://api.loginwa.com/api/auth/start \
  -H "Authorization: Bearer $LOGINWA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"phone":"6281234567890"}'

# Verify OTP
curl -X POST https://api.loginwa.com/api/auth/verify \
  -H "Authorization: Bearer $LOGINWA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"session_id":"xxx","otp_code":"123456"}'

Paket Harga

Mulai gratis, lalu skalakan seiring pertumbuhan. Harga dalam USD, bayar kartu atau QRIS, aktivasi instan. Semua paket mencakup akses API penuh, Widget, SDK, Dashboard, Webhook, dan proyek tanpa batas.

Bantuan

Endpoint macet? Email di bawah, atau buka tiket di /support.