WhatsApp Business API Documentation

{
  "AppId": "8671971xxxxxxx",
  "AppSecret": "0b34b7cc0cbxxxxxc",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "ChannelType": "whatsapp",
  "Type": "template",
  "TemplateCode": "90934259xxxxxx",
  "TemplateParams": {
    "param1": "your value here"
  },
  "Language": "en",
  "From": "604xxxxxxx",
  "To": "601X-XXXXXXX"
}

<?php
$url = "https://www.isms.com.my/isms_send_waba.php";

$data = [
    "AppId"       => "your_app_id",
    "AppSecret"   => "your_app_secret",
    "un"          => "your_username",
    "pwd"         => "your_password",
    "agreedterm"  => "YES",
    "ChannelType" => "whatsapp",
    "Type"        => "template",
    "TemplateCode" => "your_template_code",
    "TemplateParams" => ["param1" => date("Y-m-d H:i:s")],
    "Language"    => "en",
    "From"        => "your_waba_number",
    "To"          => "recipient_number"
];

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));

$response = curl_exec($ch);

if (curl_errno($ch)) {
    echo "cURL error: " . curl_error($ch);
} else {
    $result = json_decode($response, true);
    echo "Status: " . $result['statusCode'];
    echo " | MessageId: " . $result['messageId'];
}

curl_close($ch);
?>

{
  "AppId": "867197xxxx",
  "AppSecret": "0b34b7ccxxxx",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "ChannelType": "whatsapp",
  "Type": "message",
  "Content": "Hello! Your appointment is confirmed for tomorrow at 10am.",
  "From": "604xxxxxxx",
  "To": "601X-XXXXXXX"
}

<?php
$url = "https://www.isms.com.my/isms_send_waba.php";

$data = [
    "AppId"      => "your_app_id",
    "AppSecret"  => "your_app_secret",
    "un"         => "your_username",
    "pwd"        => "your_password",
    "agreedterm" => "YES",
    "ChannelType" => "whatsapp",
    "Type"       => "message",
    "Content"    => "Hello! Your appointment is confirmed for tomorrow at 10am.",
    "From"       => "your_waba_number",
    "To"         => "recipient_number"
];

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));

$response = curl_exec($ch);
echo $response;
curl_close($ch);
?>

{
  "AppId": "8671971xxxxx",
  "AppSecret": "0b34b7cc0cbxxxxx",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "ChannelType": "whatsapp",
  "Type": "file",
  "fileUrl": "https://example.com/files/marketing.png",
  "fileName": "marketing_brochure",
  "From": "604xxxxxxx",
  "To": "601X-XXXXXXX"
}

<?php
$url = "https://www.isms.com.my/isms_send_waba.php";

$data = [
    "AppId"      => "your_app_id",
    "AppSecret"  => "your_app_secret",
    "un"         => "your_username",
    "pwd"        => "your_password",
    "agreedterm" => "YES",
    "ChannelType" => "whatsapp",
    "Type"       => "file",
    "fileUrl"    => "https://example.com/files/marketing.png",
    "fileName"   => "marketing_brochure",
    "From"       => "your_waba_number",
    "To"         => "recipient_number"
];

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));

$response = curl_exec($ch);
echo $response;
curl_close($ch);
?>

{
  "requestId": "C9122953-C329-3D9A-9191-7EB5D70D54FC",
  "statusCode": "OK",
  "messageId": "202311882856605014114304"
}

{
  "MessageId": "C9122953-C329-3D9A-9191-7EB5D70D54FC",
  "From":      "60123456789",
  "To":        "604642XXXXX",
  "Timestamp": 1712390400000,
  "DisplayName": "Ahmad Razif",
  "Name":      "Ahmad Razif",
  "Type":      "TEXT",
  "Message":   "Hello, I would like to know more about your services."
}

<?php
/**
 * waba_inbound_webhook.php
 * iSMS will POST to: https://yoursite.com/waba_inbound_webhook.php?response=xxxxx
 * The ?response= param is base64 encoded JSON.
 */

// 1. Read the raw base64-encoded response from query string
$encoded = $_POST['response'] ?? $_GET['response'] ?? '';

if (empty($encoded)) {
    http_response_code(400);
    echo 'Missing response parameter';
    exit;
}

// 2. Decode the base64 payload
$json = base64_decode($encoded, true);

if ($json === false) {
    http_response_code(400);
    echo 'Invalid base64 encoding';
    exit;
}

// 3. Parse JSON into array
$msg = json_decode($json, true);

if (!$msg || !isset($msg['MessageId'])) {
    http_response_code(400);
    echo 'Invalid payload';
    exit;
}

// 4. Extract fields
$messageId   = $msg['MessageId']   ?? '';
$from        = $msg['From']        ?? '';
$to          = $msg['To']          ?? '';
$timestamp   = $msg['Timestamp']   ?? 0;
$displayName = $msg['DisplayName'] ?? '';
$name        = $msg['Name']        ?? '';
$type        = $msg['Type']        ?? 'TEXT';
$message     = $msg['Message']     ?? '';

// 5. Convert timestamp (milliseconds) to readable datetime
$datetime = date('Y-m-d H:i:s', $timestamp / 1000);

// 6. Persist the validated event to your queue or database.
// Deduplicate by MessageId. Keep message content out of public log files.
// Add your persistence code here before returning success.

// 7. Return 200 only after the event is safely accepted for processing.
http_response_code(200);
echo 'OK';
?>

{
  "un": "your_username",
  "pwd": "your_password"
}

{
  "status": "success",
  "data": [
    {
      "templateType": "PROMOTIONAL",
      "name": "New Year Offer",
      "auditStatus": "pass",
      "language": "en",
      "templateCode": "1XXXXXXXXX90",
      "last_updated_on": "2024-07-21T14:55:30Z",
      "component": "eyJ0eXBlIjogIkJPRFki...",
      "status_code": "200",
      "status_message": "Approved"
    }
  ]
}

<?php
$url  = "https://smtpapi.vocotext.com/api_waba_list_template_json.php";
$data = json_encode(["un" => "your_username", "pwd" => "your_password"]);

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);

$response = curl_exec($ch);
$templates = json_decode($response, true);

if ($templates['status'] === 'success') {
    foreach ($templates['data'] as $tpl) {
        echo $tpl['name'] . " — " . $tpl['auditStatus'] . "\n";
    }
}
curl_close($ch);
?>

{
  "un": "your_username",
  "pwd": "your_password",
  "templateCode": "1242381527277813760"
}

{
  "status": "success",
  "data": [
    {
      "templateType": "WHATSAPP",
      "name": "order_update_01",
      "auditStatus": "pass",
      "language": "en",
      "templateCode": "1242381527277813760",
      "last_updated_on": "2026-03-21 14:55:30",
      "component": "eyJ0eXBlIjogIkJPRFki...",
      "category": "UTILITY",
      "status_code": "OK"
    }
  ]
}

{
  "status": "error",
  "message": "Invalid Data"
}

<?php
$url  = "https://smtpapi.vocotext.com/api_waba_list_template_detail_json.php";
$data = json_encode([
    "un"           => "your_username",
    "pwd"          => "your_password",
    "templateCode" => "1242381527277813760"
]);

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);

$response = curl_exec($ch);
$result   = json_decode($response, true);

if ($result['status'] === 'success') {
    $tpl        = $result['data'][0];
    $components = json_decode(base64_decode($tpl['component']), true);
    echo $tpl['name'] . " (" . $tpl['category'] . ")\n";
    print_r($components);
} else {
    echo $result['message'];
}
curl_close($ch);
?>

{
  "AppId": "your_app_id",
  "AppSecret": "your_app_secret",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "From": "your_waba_number",
  "templateType": "WHATSAPP",
  "name": "order_update_01",
  "language": "en",
  "category": "UTILITY",
  "components": [
    { "type": "BODY", "text": "Hi $(name), your order $(orderid) has been shipped." },
    { "type": "FOOTER", "text": "Reply STOP to unsubscribe" },
    { "type": "BUTTONS", "buttons": [
        { "type": "URL", "text": "Track Order", "urlType": "dynamic", "url": "https://example.com/track/$(orderid)" }
    ] }
  ],
  "example": { "name": "Ali", "orderid": "INV-10023" }
}

{
  "AppId": "your_app_id",
  "AppSecret": "your_app_secret",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "From": "your_waba_number",
  "templateType": "WHATSAPP",
  "name": "login_otp_01",
  "language": "en",
  "category": "AUTHENTICATION",
  "components": [
    { "type": "BODY", "text": "", "addSecretRecommendation": "true" },
    { "type": "FOOTER", "codeExpirationMinutes": 10 },
    { "type": "BUTTONS", "buttons": [ { "type": "COPY_CODE", "text": "Copy code" } ] }
  ]
}

{
  "requestId": "3876f7cb-77fd-47a1-9f34-b673xxxxxxx",
  "statusCode": "OK",
  "templateCode": "1242381527277813760",
  "templateName": "order_update_01"
}

{
  "requestId": "ec33ce8c-e871-4764-a39f-72f5xxxxxxx",
  "statusCode": "InvalidParameter.TemplateTypeNotSupport",
  "errorMessage": "Unsupported template type"
}

<?php
$url  = "https://smtpapi.vocotext.com/api_waba_create_template.php";
$data = [
    "AppId"        => "your_app_id",
    "AppSecret"    => "your_app_secret",
    "un"           => "your_username",
    "pwd"          => "your_password",
    "agreedterm"   => "YES",
    "From"         => "your_waba_number",
    "templateType" => "WHATSAPP",
    "name"         => "order_update_01",
    "language"     => "en",
    "category"     => "UTILITY",
    "components"   => [
        ["type" => "BODY", "text" => "Hi $(name), your order has shipped."]
    ],
    "example"      => ["name" => "Ali"]
];

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));

$response = curl_exec($ch);
curl_close($ch);
echo $response;
?>

{
  "AppId": "your_app_id",
  "AppSecret": "your_app_secret",
  "un": "your_username",
  "pwd": "your_password",
  "agreedterm": "YES",
  "From": "your_waba_number",
  "templateCode": "1242381527277813760",
  "language": "en",
  "templateType": "WHATSAPP"
}

{
  "requestId": "ccb775bf-00dd-445d-9bb0-6e83xxxxxxx",
  "statusCode": "OK",
  "templateCode": "1242381527277813760",
  "language": "en"
}

{
  "requestId": "11aa2357-75a1-4ee5-8728-a55dxxxxxxx",
  "statusCode": "ERR-OPERATION-CONFIG-028",
  "errorMessage": "Template not found"
}

<?php
$url  = "https://smtpapi.vocotext.com/api_waba_delete_template.php";
$data = json_encode([
    "AppId"        => "your_app_id",
    "AppSecret"    => "your_app_secret",
    "un"           => "your_username",
    "pwd"          => "your_password",
    "agreedterm"   => "YES",
    "From"         => "your_waba_number",
    "templateCode" => "1242381527277813760",
    "language"     => "en",
    "templateType" => "WHATSAPP"
]);

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);

$response = curl_exec($ch);
curl_close($ch);
echo $response;
?>

{
  "un": "your_username",
  "pwd": "your_password"
}

{
  "status": "success",
  "data": [
    {
      "waba_number": "601X-XXXXXXX",
      "waba_status": "1",
      "waba_credit_balance": "100.00",
      "waba_credit_currency": "MYR",
      "expiry_date": "2026-12-31"
    }
  ]
}

<?php
$url  = "https://smtpapi.vocotext.com/api_waba_balance_json.php";
$data = json_encode(["un" => "your_username", "pwd" => "your_password"]);

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);

$response = curl_exec($ch);
$result   = json_decode($response, true);

if ($result['status'] === 'success') {
    foreach ($result['data'] as $acct) {
        echo $acct['waba_number'] . ": MYR " . $acct['waba_credit_balance'];
    }
}
curl_close($ch);
?>