v1 REST API
HD WhatsApp Notify REST API Reference
Interact programmatically with our secure API using HMAC-SHA256 signatures, timestamps, and nonces.
Request Authentication & Signatures
Every API call must include four security headers to guarantee integrity and prevent replay attacks.
| Header | Description | Example |
|---|---|---|
X-HDW-API-Key | Your tenant API Key generated in customer dashboard | hdw_live_8f7b2c9d... |
X-HDW-Timestamp | Current UNIX epoch timestamp (seconds). Drift > 300s rejected. | 1793277847 |
X-HDW-Nonce | Random 32-character hex string. Cached to prevent replays. | 83b21d07707c1cf66b7f9392087f79d3 |
X-HDW-Signature | HMAC-SHA256 of "{$timestamp}\n{$nonce}\n{$payload}" with your Secret | a7f8b9c... |
Core Endpoints
Verifies API credentials, tenant status, plan, quota, and server synchronization.
POST /api/v1/auth/verify HTTP/1.1
Host: app.hdwhmcsnotify.com
X-HDW-API-Key: hdw_live_8f7b...
X-HDW-Timestamp: 1730160000
X-HDW-Nonce: 4a2b...
X-HDW-Signature: 5c8d...
Content-Type: application/jsonQueues a WhatsApp notification for background worker dispatch.
{
"event_type": "invoice_created",
"recipient_phone": "03001234567",
"idempotency_key": "inv_1024_reminder",
"variables": {
"client_first_name": "Client Name",
"invoice_id": "1024",
"invoice_amount": "$25.00",
"invoice_due_date": "2026-11-05",
"invoice_url": "https://example.com/viewinvoice.php?id=1024",
"company_name": "Your Hosting Company"
}
}Returns current billing month consumption, messages remaining, and percentage used.