User Login | WhatsApp Central

Your API keys

Create a key for your website backend. The complete secret appears only once.

PRIVATE

Authentication and setup

Make requests from your server over HTTPS.

Create a key above and copy the full secret while it is visible.
Save it in your server environment or secret manager as WHATSAPP_API_KEY.
Send it in the Authorization: Bearer header. Never place it in a browser app or URL.
Connect your WhatsApp account before sending messages.

Keep your key private

The dashboard cannot show the full key again. Rotate it immediately if it is exposed; the previous key will stop working.

Send a message

Send one text message from the WhatsApp session connected to this account.

POSThttps://whatsapp.bpcc.org.in/api/v1/messages

Request fields

FIELD	TYPE	REQUIREMENT
`requestId`	string	8–128 characters: letters, numbers, dot, underscore, colon, or hyphen. Reuse it to safely check the same request.
`number`	string	Use a 10-digit Indian mobile number. Country-code handling is automatic.
`message`	string	Required, non-empty text; maximum 4,000 characters.

A repeated requestId with the same number and message returns the existing result. Reusing it with different content returns REQUEST_ID_PAYLOAD_CONFLICT.

cURL

curl -X POST https://whatsapp.bpcc.org.in/api/v1/messages \
  -H "Authorization: Bearer $WHATSAPP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"requestId":"order-123-message-1","number":"9876543210","message":"Your order is ready."}'

Node.js example

Server-side JavaScript

const response = await fetch('https://whatsapp.bpcc.org.in/api/v1/messages', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.WHATSAPP_API_KEY}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    requestId: 'order-123-message-1',
    number: '9876543210',
    message: 'Your order is ready.'
  })
});
const result = await response.json();
if (!response.ok) throw new Error(result.error || 'Request failed');
console.log(result.status);

PHP cURL example

Server-side PHP

<?php
$payload = [
  'requestId' => 'order-123-message-1',
  'number' => '9876543210',
  'message' => 'Your order is ready.'
];
$ch = curl_init('https://whatsapp.bpcc.org.in/api/v1/messages');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_HTTPHEADER => [
    'Authorization: Bearer ' . getenv('WHATSAPP_API_KEY'),
    'Content-Type: application/json'
  ],
  CURLOPT_POSTFIELDS => json_encode($payload),
  CURLOPT_RETURNTRANSFER => true
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
$result = json_decode($body, true);
if ($status >= 400) { throw new RuntimeException($result['error'] ?? 'Request failed'); }
echo $result['status'];

Check message status

Use the same requestId to retrieve the latest result.

GEThttps://whatsapp.bpcc.org.in/api/v1/messages/{requestId}

Example

curl https://whatsapp.bpcc.org.in/api/v1/messages/order-123-message-1 \
  -H "Authorization: Bearer $WHATSAPP_API_KEY"

A successful response includes status, messageId, createdAt, submittedAt, and deliveredAt. A missing request returns HTTP 404.

Responses and errors

Every response uses JSON with an ok flag.

SUBMITTEDWhatsApp accepted the send request; this does not confirm delivery.

DELIVEREDA delivery acknowledgement was received.

UNKNOWNThe outcome is uncertain. Check status and WhatsApp before taking further action.

FAILEDThe request could not be delivered.

HTTP	ERROR	MEANING
400	`INVALID_JSON`, `INVALID_RECIPIENT`, `INVALID_MESSAGE`, `INVALID_REQUEST_ID`	Check the request body and field formats.
401	`API_KEY_REQUIRED`, `API_KEY_INVALID`	Check the Bearer token; create or rotate a key in this dashboard.
403	`SUBSCRIPTION_REQUIRED`, `SUBSCRIPTION_EXPIRED`, `SERVICE_ACCESS_DENIED`	Check service access in your QRPay account.
404	`REQUEST_NOT_FOUND`	No message request was found for that requestId.
409	`REQUEST_ID_PAYLOAD_CONFLICT`	The requestId was already used with different content.
429	`RATE_LIMITED`	The account's per-minute API request limit was reached.
503	`WHATSAPP_NOT_READY`, `AUTHORIZATION_UNAVAILABLE`	Reconnect WhatsApp or try again when authorization is available.

The default limit is 30 new API send requests per minute per account. A request with an existing requestId is checked for idempotency before the limit is applied. Do not automatically retry an UNKNOWN send with a new requestId.

Good afternoon

Message volume

Your session

Recent messages

Admin — users

Unknown send outcomes

WhatsApp manage

Connection

Pairing QR

Send a message

New message

Messages history

API & docs

Your API keys

Authentication and setup

Send a message

Request fields

cURL

Check message status

Example

Responses and errors

Plans & billing

Subscription management

My profile

Account