API v1

Build with WA Gateway

Integrate WA Gateway into your application. Authenticate requests with your API key, call endpoints in your preferred language, and receive real-time webhook events.

⌁

Authentication & Base URL

Every request requires your API key.

Base URL

https://waapi.fireclashpro.com/api/v1/

Authentication Header

X-API-Key: wag_live_YOUR_API_KEY_HERE

POST

Send Message

Sends a text or media message to a recipient using your connected WhatsApp session. For a file, set message_type to "media" and pass media_url (and optionally caption) - see "Sending Files" below for the full steps, plan rules and limits.

POST /messages/send

Request examples

cURL

curl -X POST 'https://waapi.fireclashpro.com/api/v1/messages/send' \
  -H 'X-API-Key: wag_live_YOUR_API_KEY_HERE' \
  -d '{
    "session_id": "9482521",
    "recipient": "919876543210",
    "message_type": "text",
    "message": "Hello from WA Gateway!"
}'

PHP

$ch = curl_init('https://waapi.fireclashpro.com/api/v1/messages/send');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'X-API-Key: wag_live_YOUR_API_KEY_HERE',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{
    "session_id": "9482521",
    "recipient": "919876543210",
    "message_type": "text",
    "message": "Hello from WA Gateway!"
}',
    CURLOPT_RETURNTRANSFER => true,
]);

$response = curl_exec($ch);
curl_close($ch);

JavaScript

const response = await fetch('https://waapi.fireclashpro.com/api/v1/messages/send', {
  method: 'POST',
  headers: {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    "session_id": "9482521",
    "recipient": "919876543210",
    "message_type": "text",
    "message": "Hello from WA Gateway!"
})
});

const data = await response.json();

Python

import requests

headers = {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE',
    'Content-Type': 'application/json'
}

payload = {
    "session_id": "9482521",
    "recipient": "919876543210",
    "message_type": "text",
    "message": "Hello from WA Gateway!"
}

response = requests.post('https://waapi.fireclashpro.com/api/v1/messages/send', headers=headers, json=payload)
print(response.json())

Java

import java.net.URI;
import java.net.http.*;
import java.net.http.HttpRequest.BodyPublishers;

String payload = "{\"session_id\":\"9482521\",\"recipient\":\"919876543210\",\"message_type\":\"text\",\"message\":\"Hello from WA Gateway!\"}";

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://waapi.fireclashpro.com/api/v1/messages/send"))
    .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    .header("Content-Type", "application/json")
    .POST(BodyPublishers.ofString(payload))
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Go

package main

import (
    "bytes"
    "fmt"
    "io"
    "net/http"
)

func main() {
    payload := []byte(`{"session_id":"9482521","recipient":"919876543210","message_type":"text","message":"Hello from WA Gateway!"}`)
    req, _ := http.NewRequest("POST", "https://waapi.fireclashpro.com/api/v1/messages/send", bytes.NewBuffer(payload))
    req.Header.Set("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Ruby

require 'net/http'
require 'uri'
require 'json'

uri = URI('https://waapi.fireclashpro.com/api/v1/messages/send')
req = Net::HTTP::Post.new(uri)
req['X-API-Key'] = 'wag_live_YOUR_API_KEY_HERE'
req['Content-Type'] = 'application/json'
req.body = '{"session_id":"9482521","recipient":"919876543210","message_type":"text","message":"Hello from WA Gateway!"}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(req)
end

puts response.body

C#

using System.Net.Http;
using System.Text;

var client = new HttpClient();
client.DefaultRequestHeaders.Add("X-API-Key", "wag_live_YOUR_API_KEY_HERE");

var json = "{\"session_id\":\"9482521\",\"recipient\":\"919876543210\",\"message_type\":\"text\",\"message\":\"Hello from WA Gateway!\"}";
var content = new StringContent(json, Encoding.UTF8, "application/json");

var response = await client.PostAsync("https://waapi.fireclashpro.com/api/v1/messages/send", content);
var result = await response.Content.ReadAsStringAsync();

Console.WriteLine(result);

Rust

use reqwest;

#[tokio::main]
async fn main() -> Result<(), reqwest::Error> {
    let client = reqwest::Client::new();
    let response = client
        .post("https://waapi.fireclashpro.com/api/v1/messages/send")
        .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
        .header("Content-Type", "application/json")
        .body(r#"{"session_id":"9482521","recipient":"919876543210","message_type":"text","message":"Hello from WA Gateway!"}"#)
        .send()
        .await?;
    println!("{}", response.text().await?);
    Ok(())
}

Swift

import Foundation

var request = URLRequest(url: URL(string: "https://waapi.fireclashpro.com/api/v1/messages/send")!)
request.httpMethod = "POST"
request.setValue("wag_live_YOUR_API_KEY_HERE", forHTTPHeaderField: "X-API-Key")
request.setValue("application/json", forHTTPHeaderField: "Content-Type")
request.httpBody = "{\"session_id\":\"9482521\",\"recipient\":\"919876543210\",\"message_type\":\"text\",\"message\":\"Hello from WA Gateway!\"}".data(using: .utf8)

let (data, _) = try await URLSession.shared.data(for: request)
if let result = String(data: data, encoding: .utf8) {
    print(result)
}

Build with AI

Generate a ready-to-paste implementation prompt for Send Message in your language.

Programming language

Built from this section of the docs only. Your real API key is never included.

Preview prompt

JSON body

application/json

{
    "session_id": "9482521",
    "recipient": "919876543210",
    "message_type": "text",
    "message": "Hello from WA Gateway!"
}

Example response

200 OK

{
    "success": true,
    "message_id": "wamid_xxxxxxxxx",
    "status": "queued"
}

GET

List Sessions

Returns the WhatsApp sessions available for your API key.

GET /sessions

Request examples

cURL

curl -X GET 'https://waapi.fireclashpro.com/api/v1/sessions' \
  -H 'X-API-Key: wag_live_YOUR_API_KEY_HERE'

PHP

$ch = curl_init('https://waapi.fireclashpro.com/api/v1/sessions');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_HTTPHEADER => [
        'X-API-Key: wag_live_YOUR_API_KEY_HERE',
    ],
    CURLOPT_RETURNTRANSFER => true,
]);

$response = curl_exec($ch);
curl_close($ch);

JavaScript

const response = await fetch('https://waapi.fireclashpro.com/api/v1/sessions', {
  method: 'GET',
  headers: {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE'
  }
});

const data = await response.json();

Python

import requests

headers = {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE'
}

response = requests.get('https://waapi.fireclashpro.com/api/v1/sessions', headers=headers)
print(response.json())

Java

import java.net.URI;
import java.net.http.*;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://waapi.fireclashpro.com/api/v1/sessions"))
    .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    .GET()
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Go

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET", "https://waapi.fireclashpro.com/api/v1/sessions", nil)
    req.Header.Set("X-API-Key", "wag_live_YOUR_API_KEY_HERE")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Ruby

require 'net/http'
require 'uri'

uri = URI('https://waapi.fireclashpro.com/api/v1/sessions')
req = Net::HTTP::Get.new(uri)
req['X-API-Key'] = 'wag_live_YOUR_API_KEY_HERE'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(req)
end

puts response.body

C#

using System.Net.Http;

var client = new HttpClient();
client.DefaultRequestHeaders.Add("X-API-Key", "wag_live_YOUR_API_KEY_HERE");

var response = await client.GetAsync("https://waapi.fireclashpro.com/api/v1/sessions");
var result = await response.Content.ReadAsStringAsync();

Console.WriteLine(result);

Rust

use reqwest;

#[tokio::main]
async fn main() -> Result<(), reqwest::Error> {
    let client = reqwest::Client::new();
    let response = client
        .get("https://waapi.fireclashpro.com/api/v1/sessions")
        .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
        .send()
        .await?;
    println!("{}", response.text().await?);
    Ok(())
}

Swift

import Foundation

var request = URLRequest(url: URL(string: "https://waapi.fireclashpro.com/api/v1/sessions")!)
request.httpMethod = "GET"
request.setValue("wag_live_YOUR_API_KEY_HERE", forHTTPHeaderField: "X-API-Key")

let (data, _) = try await URLSession.shared.data(for: request)
if let result = String(data: data, encoding: .utf8) {
    print(result)
}

Build with AI

Generate a ready-to-paste implementation prompt for List Sessions in your language.

Programming language

Built from this section of the docs only. Your real API key is never included.

Preview prompt

Example response

200 OK

{
    "success": true,
    "sessions": [
        {
            "id": "9482521",
            "status": "connected",
            "name": "My WhatsApp"
        }
    ]
}

POST

Register Webhook

Registers an HTTPS endpoint that receives real-time WhatsApp events.

POST /webhooks

Request examples

cURL

curl -X POST 'https://waapi.fireclashpro.com/api/v1/webhooks' \
  -H 'X-API-Key: wag_live_YOUR_API_KEY_HERE' \
  -d '{
    "session_id": "9482521",
    "url": "https://example.com/webhook"
}'

PHP

$ch = curl_init('https://waapi.fireclashpro.com/api/v1/webhooks');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'X-API-Key: wag_live_YOUR_API_KEY_HERE',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{
    "session_id": "9482521",
    "url": "https://example.com/webhook"
}',
    CURLOPT_RETURNTRANSFER => true,
]);

$response = curl_exec($ch);
curl_close($ch);

JavaScript

const response = await fetch('https://waapi.fireclashpro.com/api/v1/webhooks', {
  method: 'POST',
  headers: {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    "session_id": "9482521",
    "url": "https://example.com/webhook"
})
});

const data = await response.json();

Python

import requests

headers = {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE',
    'Content-Type': 'application/json'
}

payload = {
    "session_id": "9482521",
    "url": "https://example.com/webhook"
}

response = requests.post('https://waapi.fireclashpro.com/api/v1/webhooks', headers=headers, json=payload)
print(response.json())

Java

import java.net.URI;
import java.net.http.*;
import java.net.http.HttpRequest.BodyPublishers;

String payload = "{\"session_id\":\"9482521\",\"url\":\"https:\/\/example.com\/webhook\"}";

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://waapi.fireclashpro.com/api/v1/webhooks"))
    .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    .header("Content-Type", "application/json")
    .POST(BodyPublishers.ofString(payload))
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Go

package main

import (
    "bytes"
    "fmt"
    "io"
    "net/http"
)

func main() {
    payload := []byte(`{"session_id":"9482521","url":"https://example.com/webhook"}`)
    req, _ := http.NewRequest("POST", "https://waapi.fireclashpro.com/api/v1/webhooks", bytes.NewBuffer(payload))
    req.Header.Set("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Ruby

require 'net/http'
require 'uri'
require 'json'

uri = URI('https://waapi.fireclashpro.com/api/v1/webhooks')
req = Net::HTTP::Post.new(uri)
req['X-API-Key'] = 'wag_live_YOUR_API_KEY_HERE'
req['Content-Type'] = 'application/json'
req.body = '{"session_id":"9482521","url":"https://example.com/webhook"}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(req)
end

puts response.body

C#

using System.Net.Http;
using System.Text;

var client = new HttpClient();
client.DefaultRequestHeaders.Add("X-API-Key", "wag_live_YOUR_API_KEY_HERE");

var json = "{\"session_id\":\"9482521\",\"url\":\"https://example.com/webhook\"}";
var content = new StringContent(json, Encoding.UTF8, "application/json");

var response = await client.PostAsync("https://waapi.fireclashpro.com/api/v1/webhooks", content);
var result = await response.Content.ReadAsStringAsync();

Console.WriteLine(result);

Rust

use reqwest;

#[tokio::main]
async fn main() -> Result<(), reqwest::Error> {
    let client = reqwest::Client::new();
    let response = client
        .post("https://waapi.fireclashpro.com/api/v1/webhooks")
        .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
        .header("Content-Type", "application/json")
        .body(r#"{"session_id":"9482521","url":"https://example.com/webhook"}"#)
        .send()
        .await?;
    println!("{}", response.text().await?);
    Ok(())
}

Swift

import Foundation

var request = URLRequest(url: URL(string: "https://waapi.fireclashpro.com/api/v1/webhooks")!)
request.httpMethod = "POST"
request.setValue("wag_live_YOUR_API_KEY_HERE", forHTTPHeaderField: "X-API-Key")
request.setValue("application/json", forHTTPHeaderField: "Content-Type")
request.httpBody = "{\"session_id\":\"9482521\",\"url\":\"https://example.com/webhook\"}".data(using: .utf8)

let (data, _) = try await URLSession.shared.data(for: request)
if let result = String(data: data, encoding: .utf8) {
    print(result)
}

Build with AI

Generate a ready-to-paste implementation prompt for Register Webhook in your language.

Programming language

Built from this section of the docs only. Your real API key is never included.

Preview prompt

JSON body

application/json

{
    "session_id": "9482521",
    "url": "https://example.com/webhook"
}

Example response

200 OK

{
    "success": true,
    "webhook_id": "wh_123456"
}

POST

Upload Media

Uploads an image, video, audio, or document file and returns a media_url ready to use with Send Message.

POST /media/upload

Request examples

cURL

curl -X POST 'https://waapi.fireclashpro.com/api/v1/media/upload' \
  -H 'X-API-Key: wag_live_YOUR_API_KEY_HERE' \
  -F 'file=@/path/to/photo.jpg' \
  -F 'category=image'

PHP

$ch = curl_init('https://waapi.fireclashpro.com/api/v1/media/upload');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_HTTPHEADER => ['X-API-Key: wag_live_YOUR_API_KEY_HERE'],
    CURLOPT_POSTFIELDS => [
        'file' => new CURLFile('/path/to/photo.jpg'),
        'category' => 'image',
    ],
    CURLOPT_RETURNTRANSFER => true,
]);

$response = curl_exec($ch);
curl_close($ch);

JavaScript

const form = new FormData();
form.append('file', fileInput.files[0]);  // a File/Blob, e.g. from an <input type="file">
form.append('category', 'image');

const response = await fetch('https://waapi.fireclashpro.com/api/v1/media/upload', {
  method: 'POST',
  headers: { 'X-API-Key': 'wag_live_YOUR_API_KEY_HERE' },  // do NOT set Content-Type - fetch sets the multipart boundary itself
  body: form,
});

const data = await response.json();

Python

import requests

headers = {'X-API-Key': 'wag_live_YOUR_API_KEY_HERE'}
files = {'file': open('/path/to/photo.jpg', 'rb')}
data = {'category': 'image'}

response = requests.post('https://waapi.fireclashpro.com/api/v1/media/upload', headers=headers, files=files, data=data)
print(response.json())

Java

// Java: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your Java HTTP client's documentation for multipart/form-data uploads.

Go

// Go: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your Go HTTP client's documentation for multipart/form-data uploads.

Ruby

// Ruby: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your Ruby HTTP client's documentation for multipart/form-data uploads.

C#

// C#: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your C# HTTP client's documentation for multipart/form-data uploads.

Rust

// Rust: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your Rust HTTP client's documentation for multipart/form-data uploads.

Swift

// Swift: this endpoint uploads a file as multipart/form-data.
// Send a POST to https://waapi.fireclashpro.com/api/v1/media/upload with header X-API-Key: wag_live_YOUR_API_KEY_HERE,
// a form field named "file" holding the file's bytes, and an optional "category" field.
// See your Swift HTTP client's documentation for multipart/form-data uploads.

Build with AI

Generate a ready-to-paste implementation prompt for Upload Media in your language.

Programming language

Built from this section of the docs only. Your real API key is never included.

Preview prompt

JSON body

application/json

{
    "file": "(binary file data)",
    "category": "image"
}

Example response

200 OK

{
    "success": true,
    "media_url": "https://app.fireclashpro.com/media/f/6b1f...a92.jpg",
    "category": "image",
    "content_type": "image/jpeg",
    "size_bytes": 84213
}

GET

Media Storage Usage

Returns how much of your plan's media storage quota is currently in use.

GET /media/storage

Request examples

cURL

curl -X GET 'https://waapi.fireclashpro.com/api/v1/media/storage' \
  -H 'X-API-Key: wag_live_YOUR_API_KEY_HERE'

PHP

$ch = curl_init('https://waapi.fireclashpro.com/api/v1/media/storage');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_HTTPHEADER => [
        'X-API-Key: wag_live_YOUR_API_KEY_HERE',
    ],
    CURLOPT_RETURNTRANSFER => true,
]);

$response = curl_exec($ch);
curl_close($ch);

JavaScript

const response = await fetch('https://waapi.fireclashpro.com/api/v1/media/storage', {
  method: 'GET',
  headers: {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE'
  }
});

const data = await response.json();

Python

import requests

headers = {
    'X-API-Key': 'wag_live_YOUR_API_KEY_HERE'
}

response = requests.get('https://waapi.fireclashpro.com/api/v1/media/storage', headers=headers)
print(response.json())

Java

import java.net.URI;
import java.net.http.*;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://waapi.fireclashpro.com/api/v1/media/storage"))
    .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
    .GET()
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Go

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET", "https://waapi.fireclashpro.com/api/v1/media/storage", nil)
    req.Header.Set("X-API-Key", "wag_live_YOUR_API_KEY_HERE")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Ruby

require 'net/http'
require 'uri'

uri = URI('https://waapi.fireclashpro.com/api/v1/media/storage')
req = Net::HTTP::Get.new(uri)
req['X-API-Key'] = 'wag_live_YOUR_API_KEY_HERE'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(req)
end

puts response.body

C#

using System.Net.Http;

var client = new HttpClient();
client.DefaultRequestHeaders.Add("X-API-Key", "wag_live_YOUR_API_KEY_HERE");

var response = await client.GetAsync("https://waapi.fireclashpro.com/api/v1/media/storage");
var result = await response.Content.ReadAsStringAsync();

Console.WriteLine(result);

Rust

use reqwest;

#[tokio::main]
async fn main() -> Result<(), reqwest::Error> {
    let client = reqwest::Client::new();
    let response = client
        .get("https://waapi.fireclashpro.com/api/v1/media/storage")
        .header("X-API-Key", "wag_live_YOUR_API_KEY_HERE")
        .send()
        .await?;
    println!("{}", response.text().await?);
    Ok(())
}

Swift

import Foundation

var request = URLRequest(url: URL(string: "https://waapi.fireclashpro.com/api/v1/media/storage")!)
request.httpMethod = "GET"
request.setValue("wag_live_YOUR_API_KEY_HERE", forHTTPHeaderField: "X-API-Key")

let (data, _) = try await URLSession.shared.data(for: request)
if let result = String(data: data, encoding: .utf8) {
    print(result)
}

Build with AI

Generate a ready-to-paste implementation prompt for Media Storage Usage in your language.

Programming language

Built from this section of the docs only. Your real API key is never included.

Preview prompt

Example response

200 OK

{
    "used_mb": 45.5,
    "quota_mb": 200,
    "image_video_enabled": false,
    "retention_days": 30
}

⇪

Sending Files (images, video, audio, documents)

Two steps: upload the file, then send the link you get back.

Step by step

Upload the file with POST /media/upload as multipart/form-data, field name file. Example:

curl -X POST https://waapi.fireclashpro.com/api/v1/media/upload \
  -H "X-API-Key: wag_live_YOUR_API_KEY_HERE" \
  -F "file=@invoice.pdf"

The response contains a ready-to-use media_url:

{ "media_url": "https://app.fireclashpro.com/media/f/6b1f...a92.pdf",
  "category": "document", "content_type": "application/pdf", "size_bytes": 84213 }

Send it with POST /messages/send, using message_type: "media" and that media_url. caption is optional (not used for audio):

curl -X POST https://waapi.fireclashpro.com/api/v1/messages/send \
  -H "X-API-Key: wag_live_YOUR_API_KEY_HERE" -H "Content-Type: application/json" \
  -d '{ "session_id": "9482521", "recipient": "919876543210",
        "message_type": "media",
        "media_url": "https://app.fireclashpro.com/media/f/6b1f...a92.pdf",
        "caption": "Your invoice" }'

Check the result - the send call returns a message_id and status queued; the final status (sent / failed) arrives on your webhook or via GET /messages/{message_id}.

Already host the file yourself? Skip step 1 and put your public link in media_url. The same plan rules apply, and the file is downloaded and checked by its real content before it is sent. The link must be https (or http) on port 80/443, reachable from the internet, and must not point to a private/internal address or redirect more than 3 times.

What each plan can send

Plan	Image	Video	Audio	Document	Storage
Starter	Yes	-	-	PDF only, max 2 MB	200 MB
Pro	Yes	Yes	Yes	Yes	500 MB
Business	Yes	Yes	Yes	Yes	2000 MB

Annual plans have the same access as their monthly version. Storage is a rolling 30-day total of what you uploaded; files are deleted after 30 days. There is no free plan: you need an active paid plan to connect WhatsApp and send anything. If your plan expires, sending and uploads stop until you renew.

File types and limits

Type	Formats	Max size	Max length
Image	JPG, PNG, WebP, GIF	10 MB	-
Video	MP4, MOV	60 MB	2 minutes
Audio	MP3, OGG, AAC, WAV	15 MB (WAV 20 MB)	5 minutes
Document	PDF, DOCX, XLSX	20 MB (Starter: PDF only, 2 MB)	-
Text	TXT, CSV (UTF-8)	5 MB	-

Uploads are limited to 60 per hour per account. Old .doc / .xls files are not accepted - save as .docx / .xlsx or send a PDF.

How files are checked (and what gets refused)

The type is read from the file's content, never from its name. A renamed file is identified as what it really is.
Every file is scanned by an antivirus engine before it is stored. Infected files are rejected.
Word / Excel files containing macros, ActiveX or embedded objects are rejected. PDFs containing scripts, launch actions or embedded files are rejected.
Executables, scripts, HTML, SVG, archives and anything else not in the table above are rejected.

Errors you may see

Code	HTTP	Meaning / what to do
PLAN_RESTRICTED	403	Your plan does not include this file type. Upgrade (see the table above).
STORAGE_QUOTA_EXCEEDED	413	Your 30-day media storage is full. Wait for old files to expire or upgrade.
FILE_TOO_LARGE	413	Over the size limit for that file type.
MEDIA_TOO_LONG	413	Video over 2 minutes or audio over 5 minutes.
INVALID_FILE_CONTENT	400	The file is not one of the supported types (checked by content).
FILE_TYPE_MISMATCH	400	The `category` you sent does not match the real file.
UNSAFE_FILE	400	Macros, scripts or embedded objects found. Re-save a plain file.
MALWARE_DETECTED	400	The antivirus scan flagged the file.
SCANNER_UNAVAILABLE	503	The scanner is temporarily unreachable - retry in a few minutes.
QUOTA_EXCEEDED	403	Monthly message limit reached. Upgrade or buy a top-up (top-ups need an active paid plan).
RATE_LIMITED	429	Too many requests - slow down and retry.

When you send a link you host yourself: if the link clearly names a file type your plan does not allow, the send call returns PLAN_RESTRICTED straight away; otherwise the file is checked when it is delivered and the message shows as failed with the reason.

Build with WA Gateway

Authentication & Base URL

Send Message

Build with AI

List Sessions

Build with AI

Register Webhook

Build with AI

Upload Media

Build with AI

Media Storage Usage

Build with AI

Sending Files (images, video, audio, documents)

Step by step

What each plan can send

File types and limits

How files are checked (and what gets refused)

Errors you may see

Webhook events