Guide/SendApp Agent/Reports & API

API keys and webhooks

If you want to integrate SendApp Agent with your systems (back office, CRM, automations), the API is the way. Here you'll find how to authenticate, what you can do, and how to receive incoming events via webhook. It's a technical guide, but with the concepts explained step by step.

Updated on June 16, 2026 · 6 min read

Get your API key

1. 1

   Open the "API" section

   From the menu, open API: here you'll find your account's developer key (apikey).

2. 2

   Copy the key

   Use it to authenticate your requests. Treat it like a password.

How to authenticate

Base URL

The API is on your account's domain, with the /api prefix (e.g., https://your-domain/api). Don't use "/v1" or different domains.

Authentication

Pass the key in the "X-API-Key" HTTP header, or as an "apikey" parameter in the request. Bearer token is not used.

Don't share your API key and don't put it in public code (e.g., browser-side JavaScript): anyone with the key can act on your account. If it's exposed, regenerate it.

What you can do via API

• Send messages (e.g., via the WhatsApp sending endpoint), within the channel's rules (on the official Meta API, you need an approved template to message first).
• Manage your contacts.
• Create a new Account (bot) programmatically.
• Register your webhook URL to receive incoming events.

The endpoints that accept the key work with both the account owner and an enabled operator: assign keys thoughtfully, based on who needs to integrate.

Webhooks: receiving events

With webhooks you receive incoming events in real time (e.g., a new message from a channel). You register your endpoint's URL via the API: from then on, SendApp sends the data to your system when the event occurs. It's the way to keep an external CRM or back office in sync.

Common errors

401 / unauthorized

Missing or wrong key: check the X-API-Key header or the apikey parameter.

Wrong URL

Use your account's domain with the /api prefix, without "/v1".

Too many requests on an endpoint

Some endpoints have a rate limit: spread out your calls instead of bunching them together.