Authentication

All API requests must be authenticated using your unique API Key. This page explains how to include your credentials and keep them secure.

API Key Header

Include your API key in the X-API-Key HTTP header of every request:

POST /api/messages/text HTTP/1.1
Host: app.waconnect.me
X-API-Key: wba_YOUR_API_KEY_HERE
Content-Type: application/jsonHTTP

API Key Format

WaConnect API keys follow the format wba_ followed by a random string. For example:

wba_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6Example Key

Your API key is generated when your account is created by the platform administrator. If you need a new key, contact your administrator to regenerate it.

Authentication Errors

Status Code	Error	Cause
401	Missing API Key	The X-API-Key header was not included in the request.
401	Invalid API Key	The API key does not match any active account.
403	Account Disabled	Your account has been deactivated by the administrator.

C# Example

Here is a complete C# example showing how to configure authentication with HttpClient:

using System.Net.Http;
using System.Net.Http.Headers;

public class WaConnectClient
{
    private readonly HttpClient _client;

    public WaConnectClient(string apiKey)
    {
        _client = new HttpClient
        {
            BaseAddress = new Uri("https://app.waconnect.me/api/")
        };
        _client.DefaultRequestHeaders.Add("X-API-Key", apiKey);
    }

    public async Task<string> SendTextAsync(string to, string body)
    {
        var payload = new { to, body };
        var json = System.Text.Json.JsonSerializer.Serialize(payload);
        var content = new StringContent(json, System.Text.Encoding.UTF8, "application/json");

        var response = await _client.PostAsync("messages/text", content);
        return await response.Content.ReadAsStringAsync();
    }
}C#

Rate Limits

The WaConnect API does not impose its own rate limits. However, your requests are subject to the Meta Cloud API rate limits associated with your WhatsApp Business Account. If you exceed Meta's limits, you will receive a 429 Too Many Requests response.