Docs

Authentication

Every request to the ZapZap WhatsApp API is authenticated with two headers. No login, no OAuth.

Send these headers on every call:

x-api-key your API key
x-api-secret your API secret

Both are in the dashboard, under Settings and API. The base URL of an instance is:

https://api.zapzapapi.com/api/v1/{instanceId}

Test authentication by fetching your account data:

GET /account

curl https://api.zapzapapi.com/api/v1/account \
  -H "x-api-key: YOUR_API_KEY" \
  -H "x-api-secret: YOUR_API_SECRET"

Frequently asked questions

Where do I get the key and the secret?

In the ZapZap dashboard, under Settings and API. The key (x-api-key) identifies your account and the secret (x-api-secret) authenticates the request. Keep the secret safe and never expose it in the frontend.

Do I need an OAuth token or a login?

No. The public API uses only the two headers on each request. There is no OAuth flow or session for API v1.

What is the base URL?

https://api.zapzapapi.com/api/v1/{instanceId} for operations on one instance, and /api/v1/instances and /api/v1/account for account and instance management.

Get your keys

Create your account, connect a number in minutes and test the API with warm-up and anti-ban. R$15 per active number/month, prepaid, no lock-in.

Create free account View the documentation