WizMessage provides a developer-friendly API that lets you connect your existing systems — your e-commerce store, CRM, helpdesk, or custom application — to drive chatbot actions, manage contacts, and send bulk messages programmatically. From this screen, you generate and manage API keys with enterprise-grade security: keys are hashed for safe storage, secrets are shown only once, and you can restrict access by IP whitelist and enforce rate and daily request limits. Set up outbound webhooks to receive real-time events (message received, delivered, read) with signature verification, and use the built-in Playground to test live API calls directly from your browser before writing any integration code.
API & WEBHOOK ARCHITECTURE START DONE ADMIN 1 Generate Keys Admin creates API key and secret. DEVELOPER 2 Integrate API Developer uses keys in external software. SYSTEM 3 Event Occurs Message sent or delivered triggers a webhook. SYSTEM 4 Webhook Delivery Payload signed and sent to developer server (up to 5 retries). API & WEBHOOK ARCHITECTURE ADMIN 1 Generate Keys Admin creates API key and secret. DEVELOPER 2 Integrate API Developer uses keys in external software. SYSTEM 3 Event Occurs Message sent or delivered triggers a webhook. SYSTEM 4 Webhook Delivery Payload signed and sent to developer server (up to 5 retries). DONE
📊 Plan Requirement: API Management requires Wiz Bot or Wiz Pro . API calls and webhook deliveries are unlimited — no monthly message cap applies to API usage.
Generate API Keys — create secure API keys (pk_live_...) and single-view secrets (sk_live_...) to connect external systems.Rotate Secrets — if compromised, regenerate your secret while keeping the public key intact to avoid full code refactoring.Enforce IP Whitelisting — define a comma-separated list of allowed IP addresses to block unauthorized requests.Set Usage Limits — mitigate abuse by defining rate limits (requests per minute) and daily absolute caps.Configure Webhooks — set up outbound webhooks with a signature token (whsec_...) to receive real-time events (sent, delivered, received).Test in the Playground — use the built-in, in-browser Playground to execute live test calls using your templates and contacts before writing code.
WHAT YOU CAN DO WizMessage One dashboard, every channel Generate API Keys Create secure public and secret key pairs Rotate Secrets Regenerate secrets without breaking key IDs IP Whitelisting Restrict access to allowed IP addresses Usage Limits Enforce rate and daily request limits Webhooks Real-time events with signature verification API Playground Test live calls directly in your browser WHAT YOU CAN DO WizMessage One dashboard, every channel Generate API Keys Create secure public and secret key pairs Rotate Secrets Regenerate secrets without breaking key IDs IP Whitelisting Restrict access to allowed IP addresses Usage Limits Enforce rate and daily request limits Webhooks Real-time events with signature verification API Playground Test live calls directly in your browser YOUR API INTEGRATION WORKFLOW START DONE STEP 1 1 Generate Keys Create a new API key, set rate limits and IP whitelists, and copy the Secret Key (it is onl… STEP 2 2 Test in Playground Open the Playground tab, select your key, configure message parameters, and send a live… STEP 3 3 Configure Webhooks Set up a webhook URL to receive events, and use the generated Webhook Secret to verify payload… YOUR API INTEGRATION WORKFLOW STEP 1 1 Generate Keys Create a new API key, set rate limits and IP whitelists, and copy the Secret Key (it is only shown… STEP 2 2 Test in Playground Open the Playground tab, select your key, configure message parameters, and send a live test request. STEP 3 3 Configure Webhooks Set up a webhook URL to receive events, and use the generated Webhook Secret to verify payload signatures. DONE
Tip: Treat API keys like passwords. Never commit them to Git repositories or hardcode them in frontend code. If a key is leaked, revoke or rotate it immediately.
Our API enforces strict enterprise-grade security and rate limiting.
API Key Format: Prefixed with pk_live_ (e.g., pk_live_abcd1234...). The first 12 characters are plain text for identification; the full key is hashed via SHA-256.API Secret Format: Prefixed with sk_live_ (e.g., sk_live_xyz9876...). Shown only once upon creation.Rate Limit: Maximum allowed requests per minute per key (defaults to 60).Daily Limit: Hard daily cap on total requests per key (defaults to 1000).
Webhook Secret: Automatically generates a signature token prefixed with whsec_ (e.g., whsec_abc123...).Signature Verification: Every webhook contains a X-WizMessage-Signature header (HMAC-SHA256 signature of the raw body using your whsec_ secret).Event Subscriptions: Subscribe to specific events like message.received, message.sent, delivery.updated, or listen to all.Retry Logic: Failed webhook deliveries are retried with delays up to 5 attempts.
The API turns WizMessage from a standalone tool into a connected part of your business operations.
WHATSAPP VS EMAIL WhatsApp Email Of abandoned carts recovered using automated WhatsApp… 15-25% Email — far lower Return on investment for an online brand using cart… 140× Reduction in "Where is my order?" tickets using order… 40-70% Email — far lower WHATSAPP VS EMAIL WhatsApp Email Of abandoned carts recovered using automated WhatsApp reminders 15-25% Return on investment for an online brand using cart recovery 140× Reduction in "Where is my order?" tickets using order webhooks 40-70% PLAYBOOK: HIGH-RETURN INTEGRATIONS DAY 1 RESULTS SALES Cart Recovery Connect your e-commerce store to send a WhatsApp reminder 30–45 minutes after cart abandonment. Yields far better recovery than… 1 SUPPORT Order Updates Send automated status updates (packed, shipped, delivered) to drastically reduce routine support tickets. 2 OPERATIONS CRM Sync Sync every interaction back to HubSpot, Zoho, or Salesforce so sales and support teams share a unified customer view. 3 PLAYBOOK: HIGH-RETURN INTEGRATIONS 1 SALES Cart Recovery Connect your e-commerce store to send a WhatsApp reminder 30–45 minutes after cart abandonment. Yields far better recovery than email. 2 SUPPORT Order Updates Send automated status updates (packed, shipped, delivered) to drastically reduce routine support tickets. 3 OPERATIONS CRM Sync Sync every interaction back to HubSpot, Zoho, or Salesforce so sales and support teams share a unified customer view. An e-commerce sports brand integrated cart recovery, order updates, and CRM syncing and tracked the results:
3× increase in overall conversion rate.23% cart recovery (vs. 8% industry average for email).35% reduction in support costs.Customer satisfaction improved from 3.2 to 4.6 out of 5 .
MEASURED IMPROVEMENTS WITH API INTEGRATIONS CART RECOVERY RATE BEFORE 8% (Email) AFTER 23% 95% IMPROVED SUPPORT TICKET VOLUME BEFORE Baseline AFTER -40% 60% IMPROVED CUSTOMER SATISFACTION BEFORE 3.2 / 5 AFTER 4.6 / 5 92% IMPROVED Industry case studies: e-commerce sports brand MEASURED IMPROVEMENTS WITH API INTEGRATIONS CART RECOVERY RATE BEFORE 8% (Email) 95% AFTER 23% SUPPORT TICKET VOLUME BEFORE Baseline 60% AFTER -40% CUSTOMER SATISFACTION BEFORE 3.2 / 5 92% AFTER 4.6 / 5 Industry case studies: e-commerce sports brand
Bot Settings — The chatbot behavior driven by your API.Message Settings — Monitor limits and accounts that your keys act on.WhatsApp Templates — Choose which pre-approved message layouts are sent via API.