AI-powered WhatsApp agents for your business — AI WhatsApp agents — Start Now
Everything you need to build on top of ConvoAI. Manage AI agents, read conversations, push knowledge, send messages, and react to real-time events — all through a clean REST API.
The ConvoAI API gives you full programmatic control over every part of the platform. Common use cases:
ConvoAI sits between Meta's WhatsApp Cloud API and your customers. Your application interacts with ConvoAI's REST API and receives events via webhooks.
All API requests require a secret API key passed as a Bearer token in the Authorization header. Keys are scoped to your account and inherit your subscription limits.
Keep your key secret. Never expose it in client-side code, public repos, or browser consoles. Rotate immediately if compromised — Settings → API Keys → Revoke.
Live keys are prefixed ck_live_. Test keys (sandbox mode, no real WhatsApp messages sent) are prefixed ck_test_.
# All requests require this header Authorization: Bearer ck_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx # Example curl curl https://app.convoai.cloud/api/v1/agents/ \ -H "Authorization: Bearer ck_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx" \ -H "Content-Type: application/json"
curl https://app.convoai.cloud/api/v1/me/ \ -H "Authorization: Bearer YOUR_API_KEY"
{ "id": "usr_01HXYZ1234ABCD", "email": "you@yourbusiness.com", "plan": "pro", "agents_count": 2, "api_version": "v1.4" }
Get from zero to sending your first API-triggered WhatsApp message in under 5 minutes.
curl https://app.convoai.cloud/api/v1/agents/ \ -H "Authorization: Bearer YOUR_API_KEY"
{ "count": 1, "results": [ { "id": "agt_01HXYZ1234ABCD", "name": "My Sales Agent", "status": "active", "phone_number": "+14155550123", "created_at": "2026-01-15T10:30:00Z" } ] }
curl -X POST https://app.convoai.cloud/api/v1/agents/agt_01HXYZ1234ABCD/knowledge/ \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "title": "Summer 2026 Pricing", "content": "Our summer plans start at $49/mo. Enterprise quotes available.", "doc_type": "text" }'
curl -X POST https://app.convoai.cloud/api/v1/agents/agt_01HXYZ1234ABCD/messages/ \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "to": "+14155559876", "type": "text", "text": "Hi! Your order has been confirmed. Reply anytime if you need help." }'
{ "message_id": "msg_01HABC9876WXYZ", "status": "queued", "to": "+14155559876", "queued_at": "2026-05-10T14:22:01Z" }
curl -X POST https://app.convoai.cloud/api/v1/agents/agt_01HXYZ1234ABCD/webhooks/ \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "url": "https://yourapp.com/webhooks/convoai", "events": ["lead.qualified", "appointment.booked", "handoff.triggered"], "secret": "whsec_your_signing_secret" }'
ConvoAI will send a POST to your URL for every subscribed event with an HMAC-SHA256 signature in the X-ConvoAI-Signature header. See Webhook Verification.
Rate limits are applied per API key. All responses include rate limit headers.
| Plan | Requests / minute | Messages / hour | Knowledge writes / day |
|---|---|---|---|
| Free | 30 | 60 | 20 |
| Pro | 300 | 1,000 | 500 |
| Enterprise | 3,000 | Unlimited | Unlimited |
When a limit is exceeded, the API returns 429 Too Many Requests. Inspect the response headers to determine when to retry:
X-RateLimit-Limit: 300 X-RateLimit-Remaining: 247 X-RateLimit-Reset: 1715349600 Retry-After: 12
The current stable version is v1.4. The version is specified in the URL path: https://app.convoai.cloud/api/v1/.
We will never make breaking changes within a major version. When a new major version is released, the previous version remains supported for a minimum of 12 months. Breaking change deprecations are announced via email, the changelog, and a Deprecation response header.
Pinning to a version: We strongly recommend pinning to /api/v1/ explicitly rather than using any "latest" alias, to avoid unexpected breakage during major version upgrades.
By integrating with the ConvoAI API you agree to our developer policies. Read each document before going live — especially the Acceptable Use Policy, which governs what you may and may not send via WhatsApp.
WhatsApp Commerce Policy: The AUP explicitly lists Meta's prohibited industries and messaging rules. Violating these can result in your WhatsApp Business Account being suspended by Meta, independently of any action ConvoAI takes. Review the WhatsApp compliance section before sending any outbound messages.