API do GO-API

curl -X POST https://api.suaempresa.com/api/send/text \
  -H "Content-Type: application/json" \
  -H "x-api-key: goapikey_SUA_CHAVE" \
  -d '{"to": "5511999999999", "text": "Olá! Primeira mensagem pela API 🚀"}'

x-api-key: goapikey_SUA_CHAVE
apikey: goapikey_SUA_CHAVE
Authorization: Bearer goapikey_SUA_CHAVE

{
  "id": "4b8f2c1e-6a1d-4f5e-9d3a-2c7b8e9f0a1b",
  "messageId": "3EB0A1B2C3D4E5F6A7B8",
  "to": "5511999999999",
  "type": "TEXT",
  "status": "SENT",
  "createdAt": "2026-10-16T13:45:12.000Z",
  "success": true,
  "jid": "5511999999999@s.whatsapp.net"
}

{
  "statusCode": 400,
  "message": ["Botão 2: Botão de link requer uma URL http(s) válida"],
  "error": "Bad Request"
}

curl https://api.suaempresa.com/api/instance -H "x-api-key: goapikey_SUA_CHAVE"

{
  "id": "4b8f2c1e-6a1d-4f5e-9d3a-2c7b8e9f0a1b",
  "name": "Atendimento",
  "status": "CONNECTED",
  "phone": "5511999999999",
  "profileName": "Minha Loja",
  "queue": 0
}

{ "numbers": ["5511999999999", "5521988887777"] }

[
  { "number": "5511999999999", "exists": true, "jid": "5511999999999@s.whatsapp.net" },
  { "number": "5521988887777", "exists": false, "jid": null }
]

{
  "to": "5511999999999",
  "text": "Olá, *Maria*! 👋\nSeu pedido #1234 foi enviado.",
  "delay": 1500
}

{
  "to": "5511999999999",
  "imageUrl": "https://suaempresa.com/promo.jpg",
  "caption": "Promoção da semana 🔥"
}

{ "to": "5511999999999", "videoUrl": "https://suaempresa.com/tutorial.mp4", "caption": "Veja como usar" }

{ "to": "5511999999999", "audioUrl": "https://suaempresa.com/boas-vindas.mp3", "ptt": true }

{
  "to": "5511999999999",
  "documentUrl": "https://suaempresa.com/boletos/1234.pdf",
  "filename": "boleto-outubro.pdf",
  "caption": "Segue seu boleto 📄"
}

{ "to": "5511999999999", "contactName": "Suporte Loja", "contactPhone": "5511988887777", "organization": "Minha Loja" }

{
  "to": "5511999999999",
  "latitude": -23.561684,
  "longitude": -46.655981,
  "name": "Loja Paulista",
  "address": "Av. Paulista, 1000 - São Paulo"
}

{
  "to": "5511999999999",
  "question": "Qual horário prefere para a entrega?",
  "options": ["Manhã", "Tarde", "Noite"],
  "selectableCount": 1
}

{
  "to": "5511999999999",
  "title": "Atendimento Minha Loja",
  "text": "Olá! Como podemos ajudar? Escolha uma opção:",
  "footer": "Responda tocando em um botão",
  "buttons": [
    { "type": "reply", "text": "📦 Meu pedido", "id": "menu_pedido" },
    { "type": "reply", "text": "💳 Pagamento", "id": "menu_pagamento" },
    { "type": "reply", "text": "👤 Falar com atendente", "id": "menu_humano" }
  ]
}

{
  "to": "5511999999999",
  "imageUrl": "https://suaempresa.com/img/fatura.png",
  "text": "Sua fatura de *R$ 89,90* vence amanhã.\nCopie o código Pix abaixo ou pague pelo link.",
  "footer": "Minha Loja · Financeiro",
  "buttons": [
    { "type": "copy", "text": "Copiar código Pix", "copyCode": "00020126580014br.gov.bcb.pix0136...", "id": "pix_1234" },
    { "type": "url", "text": "Pagar pelo site", "url": "https://suaempresa.com/fatura/1234" },
    { "type": "call", "text": "Ligar para o suporte", "phoneNumber": "+551140028922" }
  ]
}

{
  "to": "5511999999999",
  "text": "Olá, João! Você tem consulta *amanhã às 14h*. Confirma presença?",
  "buttons": [
    { "type": "reply", "text": "✅ Confirmo", "id": "agenda_987_sim" },
    { "type": "reply", "text": "❌ Preciso remarcar", "id": "agenda_987_nao" }
  ]
}

{
  "event": "MESSAGES_UPSERT",
  "instance": { "id": "4b8f2c1e-...", "name": "Atendimento" },
  "data": {
    "key": { "remoteJid": "5511999999999@s.whatsapp.net", "fromMe": false, "id": "3EB0C5D6E7F8A9B0" },
    "pushName": "João",
    "chatJid": "5511999999999@s.whatsapp.net",
    "messageType": "interactiveResponseMessage",
    "text": "✅ Confirmo",
    "buttonId": "agenda_987_sim",
    "message": { "...": "conteúdo bruto do WhatsApp" },
    "messageTimestamp": 1760622312
  },
  "date_time": "2026-10-16T13:45:12.000Z"
}

{
  "to": "5511999999999",
  "title": "Coleção de Verão",
  "text": "Chegaram as novidades! Toque abaixo para ver todos os produtos.",
  "imageUrl": "https://suaempresa.com/img/colecao.jpg",
  "buttonText": "Ver produtos"
}

{
  "to": "5511999999999",
  "productId": "7012345678901234",
  "title": "Camiseta Básica Preta",
  "price": 59.9,
  "imageUrl": "https://suaempresa.com/produtos/camiseta.jpg",
  "description": "100% algodão, tamanhos P ao GG",
  "text": "Separamos este item para você 😉"
}

curl "https://api.suaempresa.com/api/catalog?limit=20" -H "x-api-key: goapikey_SUA_CHAVE"

{
  "owner": "5511999999999",
  "catalogUrl": "https://wa.me/c/5511999999999",
  "products": [
    {
      "id": "7012345678901234",
      "name": "Camiseta Básica Preta",
      "description": "100% algodão",
      "price": 59.9,
      "priceFormatted": "R$ 59,90",
      "currency": "BRL",
      "imageUrl": "https://...",
      "url": null,
      "retailerId": "SKU-001",
      "available": true
    }
  ],
  "nextCursor": null
}

POST https://seusistema.com/webhook/whatsapp
Content-Type: application/json
X-Event: MESSAGES_UPSERT
X-Delivery-Id: 1f0c6a2e-9b3d-4c1a-8e7f-5d4c3b2a1f0e
X-Timestamp: 1760622312
X-Signature: sha256=9f2c...   (somente se houver segredo)

{
  "event": "MESSAGES_UPSERT",
  "instance": { "id": "4b8f2c1e-...", "name": "Atendimento" },
  "data": { ... },
  "date_time": "2026-10-16T13:45:12.000Z"
}

{
  "event": "MESSAGES_UPSERT",
  "instance": { "id": "4b8f2c1e-...", "name": "Atendimento" },
  "data": {
    "key": { "remoteJid": "5511999999999@s.whatsapp.net", "fromMe": false, "id": "3EB0A9F1C2D3E4F5" },
    "pushName": "Maria",
    "chatJid": "5511999999999@s.whatsapp.net",
    "messageType": "conversation",
    "text": "Oi, quero saber do meu pedido",
    "buttonId": null,
    "message": { "conversation": "Oi, quero saber do meu pedido" },
    "messageTimestamp": 1760622312
  },
  "date_time": "2026-10-16T13:45:12.000Z"
}

// CONNECTION_UPDATE
{ "state": "open", "status": "CONNECTED", "phone": "5511999999999", "reason": null }

// QRCODE_UPDATED (base64 é uma imagem PNG pronta para <img src="...">)
{ "qrcode": { "code": "2@AbCd...", "base64": "data:image/png;base64,iVBOR..." }, "attempt": 1 }

// SEND_MESSAGE (source: api, panel, bot ou chatwoot)
{ "key": { "remoteJid": "5511999999999@s.whatsapp.net", "fromMe": true, "id": "3EB0..." }, "message": { ... }, "source": "api" }

<?php
$secret    = 'SEU_SEGREDO';
$body      = file_get_contents('php://input');            // corpo BRUTO, antes de decodificar
$timestamp = $_SERVER['HTTP_X_TIMESTAMP'] ?? '';
$signature = $_SERVER['HTTP_X_SIGNATURE'] ?? '';

$expected = 'sha256=' . hash_hmac('sha256', $timestamp . '.' . $body, $secret);

if (!hash_equals($expected, $signature) || abs(time() - (int) $timestamp) > 300) {
    http_response_code(401);
    exit;
}

$event = json_decode($body, true);
http_response_code(200);
// ... trate $event['event'] e $event['data']

// Node.js + Express
const crypto = require('crypto');
const express = require('express');
const app = express();

app.post('/webhook/whatsapp', express.raw({ type: 'application/json' }), (req, res) => {
  const timestamp = req.get('X-Timestamp') || '';
  const expected = 'sha256=' + crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(`${timestamp}.${req.body}`)
    .digest('hex');
  const received = req.get('X-Signature') || '';

  const valid = received.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(received), Buffer.from(expected));
  if (!valid) return res.sendStatus(401);

  res.sendStatus(200);
  const event = JSON.parse(req.body);
  // ... trate event.event e event.data
});

// npm install socket.io-client
import { io } from 'socket.io-client';

const socket = io('https://api.suaempresa.com', {
  path: '/ws',
  auth: { apikey: 'goapikey_SUA_CHAVE' }, // uma instância
  // auth: { token: 'JWT' },              // todas as instâncias do usuário
});

socket.on('MESSAGES_UPSERT', (evt) => {
  console.log(evt.data.chatJid, evt.data.text, evt.data.buttonId);
});
socket.on('CONNECTION_UPDATE', (evt) => console.log('Status:', evt.data.status));
socket.on('error', (err) => console.error(err.message));

curl -X POST https://api.suaempresa.com/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email": "admin@suaempresa.com", "password": "SUA_SENHA"}'

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": { "id": "...", "email": "admin@suaempresa.com", "name": "admin", "role": "ADMIN" }
}

# 1. Login
TOKEN=$(curl -s -X POST https://api.suaempresa.com/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"admin@suaempresa.com","password":"SUA_SENHA"}' | jq -r .token)

# 2. Criar instância (guarde o id e a apiKey)
curl -s -X POST https://api.suaempresa.com/instances \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{"name":"Cliente 01"}'

# 3. Iniciar conexão e exibir o qrCode (imagem base64) para o usuário escanear
curl -s -X POST https://api.suaempresa.com/instances/ID_DA_INSTANCIA/connect \
  -H "Authorization: Bearer $TOKEN"

# 4. Consultar até status = CONNECTED (ou ouvir o evento CONNECTION_UPDATE)
curl -s https://api.suaempresa.com/instances/ID_DA_INSTANCIA/qr \
  -H "Authorization: Bearer $TOKEN"

{
  "rejectCalls": true,
  "rejectCallMessage": "Não atendemos ligações. Mande uma mensagem 🙂",
  "webhook": {
    "enabled": true,
    "url": "https://seusistema.com/webhook/whatsapp",
    "secret": "um-segredo-forte",
    "events": ["MESSAGES_UPSERT", "MESSAGES_UPDATE", "CONNECTION_UPDATE"]
  }
}

{ "instanceId": "4b8f2c1e-6a1d-4f5e-9d3a-2c7b8e9f0a1b", "to": "5511999999999", "text": "Olá!" }

<?php
// webhook.php
const API_URL = 'https://api.suaempresa.com';
const API_KEY = 'goapikey_SUA_CHAVE';
const SECRET  = 'SEU_SEGREDO';

function go_api(string $path, array $body): array
{
    $ch = curl_init(API_URL . $path);
    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 60,
        CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'x-api-key: ' . API_KEY],
        CURLOPT_POSTFIELDS     => json_encode($body, JSON_UNESCAPED_UNICODE),
    ]);
    $response = curl_exec($ch);
    curl_close($ch);
    return json_decode((string) $response, true) ?? [];
}

// 1. Valida a assinatura
$raw = file_get_contents('php://input');
$expected = 'sha256=' . hash_hmac('sha256', ($_SERVER['HTTP_X_TIMESTAMP'] ?? '') . '.' . $raw, SECRET);
if (!hash_equals($expected, $_SERVER['HTTP_X_SIGNATURE'] ?? '')) {
    http_response_code(401);
    exit;
}

// 2. Responde 200 imediatamente
http_response_code(200);
if (function_exists('fastcgi_finish_request')) fastcgi_finish_request();

$event = json_decode($raw, true);
if (($event['event'] ?? '') !== 'MESSAGES_UPSERT') exit;

$data = $event['data'];
if (!empty($data['key']['fromMe'])) exit;                   // ignora mensagens próprias
if (str_ends_with($data['chatJid'], '@g.us')) exit;          // ignora grupos

$to       = $data['chatJid'];
$text     = mb_strtolower(trim($data['text'] ?? ''));
$buttonId = $data['buttonId'] ?? null;

// 3. Clique em botão
switch ($buttonId) {
    case 'menu_pedido':
        go_api('/api/send/text', ['to' => $to, 'text' => 'Informe o número do seu pedido 📦']);
        exit;
    case 'menu_pagamento':
        go_api('/api/send/buttons', [
            'to'      => $to,
            'text'    => 'Pague com Pix copiando o código abaixo:',
            'buttons' => [
                ['type' => 'copy', 'text' => 'Copiar código Pix', 'copyCode' => '00020126580014br.gov.bcb.pix...'],
                ['type' => 'url', 'text' => 'Ver fatura', 'url' => 'https://suaempresa.com/fatura'],
            ],
        ]);
        exit;
    case 'menu_humano':
        go_api('/api/send/text', ['to' => $to, 'text' => 'Certo! Um atendente vai falar com você em instantes 👤']);
        exit;
}

// 4. Texto livre: mostra o menu
if (in_array($text, ['oi', 'olá', 'ola', 'menu'], true)) {
    go_api('/api/send/buttons', [
        'to'      => $to,
        'title'   => 'Minha Loja',
        'text'    => 'Olá, ' . ($data['pushName'] ?? '') . '! Como podemos ajudar?',
        'footer'  => 'Atendimento automático',
        'buttons' => [
            ['type' => 'reply', 'text' => '📦 Meu pedido', 'id' => 'menu_pedido'],
            ['type' => 'reply', 'text' => '💳 Pagamento', 'id' => 'menu_pagamento'],
            ['type' => 'reply', 'text' => '👤 Atendente', 'id' => 'menu_humano'],
        ],
    ]);
}

const API_URL = 'https://api.suaempresa.com';
const API_KEY = process.env.GOAPI_KEY;

async function goApi(path, body) {
  const res = await fetch(API_URL + path, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json', 'x-api-key': API_KEY },
    body: JSON.stringify(body),
    signal: AbortSignal.timeout(60_000),
  });
  const data = await res.json();
  if (!res.ok) throw new Error([].concat(data.message).join('; '));
  return data;
}

await goApi('/api/send/buttons', {
  to: '5511999999999',
  text: 'Seu pedido saiu para entrega 🚚',
  buttons: [
    { type: 'url', text: 'Rastrear pedido', url: 'https://suaempresa.com/rastreio/1234' },
    { type: 'copy', text: 'Copiar rastreio', copyCode: 'BR123456789BR' },
  ],
});

import requests

API_URL = "https://api.suaempresa.com"
HEADERS = {"x-api-key": "goapikey_SUA_CHAVE"}

r = requests.post(f"{API_URL}/api/send/buttons", headers=HEADERS, timeout=60, json={
    "to": "5511999999999",
    "text": "Confirma sua consulta amanhã às 14h?",
    "buttons": [
        {"type": "reply", "text": "✅ Confirmo", "id": "agenda_987_sim"},
        {"type": "reply", "text": "❌ Remarcar", "id": "agenda_987_nao"},
    ],
})
r.raise_for_status()
print(r.json()["messageId"])