Skip to main content
All Wachat API requests use a bearer token. Send the token in the Authorization header.
Never expose your token in browser JavaScript, mobile client code, public repositories, or logs.

Base URL

Store the token in a server-side environment variable or secret manager and rotate it immediately if exposed.