What Hookswhathooks

WhatsApp as a webhook. For developers

Connect a real number with a QR scan. Every message reaches your endpoint signed, and you reply with a POST. No Business API, no mandatory SDKs.

Inbound → your webhook

message.received
POST https://your-app.com/webhooks/whatsapp
X-Whathooks-Event: message.received
X-Whathooks-Signature: sha256=2f7a…

{
  "event": "message.received",
  "sessionId": "sess_8f2a…",
  "data": { "from": "5491155551234", "text": "Hola!" },
  "timestamp": "2026-08-07T12:00:00.000Z"
}

Outbound → our API

POST /v1/messages
curl -X POST https://api.whathooks.com/v1/messages \
  -H "X-API-Key: wh_live_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{ "sessionId": "sess_8f2a…",
        "to": "5491155551234",
        "text": "¡Hola!" }'

Signed webhooks (HMAC-SHA256)

Every delivery carries X-Whathooks-Signature to verify origin, plus delivery logs with response codes per event.

REST API with server keys

Send text and media with a POST authenticated by X-API-Key. Multiple sessions side by side, each with its own webhook.

Payloads shaped your way, per event

Rename fields, format dates and inject fixed values from the dashboard. Separate rules for messages and contacts.

Everything else is already handled

The inbox, AI agents and handoffs coexist with your integration: automate your part and leave the rest to the dashboard.

Available events: message.received, session.status, session.qr, contact.created and contact.updated. Payloads and signatures in the technical docs