Skip to main content
POST
Create or Update Webhook
Create a webhook endpoint for your Wachat account. Webhooks can listen to all instances or only one specific apiInstanceName. Supported events:
To receive events from all instances, omit instanceName.

Delivery Headers

Every webhook delivery includes these headers:
X-Wachat-Signature is an HMAC-SHA256 signature of:
using your webhook secret.
The webhook URL must use HTTPS. The secret is returned when creating/updating a webhook. Store it securely.

Authorizations

Authorization
string
header
required

Authenticate your integration payloads by injecting your premium secure Wachat Account API Private Secret Key inside standard Authorization Bearer header vectors.

Body

application/json
url
string
required

HTTPS endpoint that will receive Wachat webhook deliveries.

Example:

"https://example.com/wachat/webhook"

id
integer

Existing webhook id. Include this to update a webhook.

Example:

12

name
string
Example:

"Production webhook"

events
enum<string>[]
Available options:
*,
messages.upsert,
messages.update,
contacts.update,
chats.update,
qrcode.updated,
connection.update
Example:
instanceName
string

Optional API instance name. Omit this to receive events for all instances in the account.

Example:

"t1_mq9r2jov_jakarta_store"

enabled
boolean
default:true
Example:

true

secret
string

Optional custom webhook secret. If omitted, Wachat generates one.

Example:

"whsec_your_custom_secret"

Response

Webhook updated successfully.

success
boolean
Example:

true

webhook
object