server/routes.ts (~5300 lines, 160+ endpoints). All protected routes require Authorization: Bearer <token> or a valid session cookie.
Auth
Users
Bots
Channels
Campaigns
Contacts
Integrations & Tools
Payments
Analytics / Dashboard
Admin
Incoming Webhooks
| Endpoint | Service |
|---|---|
POST /api/webhooks/gupshup/incoming_msg | Gupshup — messages |
POST /api/webhooks/gupshup/message-events | Gupshup — delivery/read receipts |
GET/POST /api/webhook/facebook | Facebook/Meta |
POST /api/webhook/wasimple | Wasimple |
POST /api/stripe-webhook | Stripe |
Outgoing Webhooks (user-defined)
Users can configure per-bot webhooks that fire during conversations:- Managed via
GET/POST /api/bots/:id/webhooks - Webhook endpoint:
POST /api/v1/webhookwith API token auth - Dynamic parameters can be passed in webhook payloads