Create scoped API keys for server-to-server access to /api/external. The full secret is shown once at create or regenerate — store it in your secrets manager.

Dashboard APIs use JWT. Integrations use X-API-Key on /api/external only. Keys cannot call inbox, team, billing, or other dashboard routes. Plan limits cap how many keys you can keep active.

Permission scopes

Assign only the scopes your integration needs. GET /api/api-keys/permissions is a public catalog of the current keys.

messages:send — queue outbound text and media via the External API
messages:read — fetch delivery status
sessions:read — list connected WhatsApp sessions
contacts:read — list workspace contacts
numbers:check — WhatsApp registration lookup

Rotate keys with regenerate. Revoke immediately if a secret leaks. Every /api/external call is logged for analytics.

GET/api/api-keys/permissions

List permission catalog

Public list of scopes you can assign when creating a key.

URL: https://api.actiwapi.com/api/api-keys/permissions

Auth: None

Code examples

curl -X GET "https://api.actiwapi.com/api/api-keys/permissions" \
  -H "Content-Type: application/json"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/permissions", {
    method: "GET",
    headers: {
    "Content-Type": "application/json"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/permissions", {
  method: "GET",
  headers: {
    "Content-Type": "application/json"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.get(
    "https://api.actiwapi.com/api/api-keys/permissions",
    headers={
        "Content-Type": "application/json",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/permissions")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Get.new(uri)
request["Content-Type"] = "application/json"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/permissions");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/permissions");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();


var url = "https://api.actiwapi.com/api/api-keys/permissions";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{

});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.actiwapi.com/api/api-keys/permissions");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.actiwapi.com/api/api-keys/permissions", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/permissions"))
    .method("GET", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{
  "success": true,
  "data": [
    { "key": "messages:send", "label": "Send messages", "description": "Queue outbound WhatsApp text and media messages" }
  ]
}

Try in Swagger UI

GET/api/api-keys

List API keys

Metadata only — the secret is never returned after creation.

URL: https://api.actiwapi.com/api/api-keys

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Code examples

curl -X GET "https://api.actiwapi.com/api/api-keys" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys", {
    method: "GET",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys", {
  method: "GET",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.get(
    "https://api.actiwapi.com/api/api-keys",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Get.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.actiwapi.com/api/api-keys");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.actiwapi.com/api/api-keys", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys"))
    .method("GET", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{
  "success": true,
  "data": [{
    "id": "uuid",
    "name": "Production server",
    "prefix": "awp_live_",
    "permissions": ["messages:send", "messages:read", "sessions:read"],
    "isActive": true,
    "lastUsedAt": "2026-09-03T10:00:00.000Z"
  }]
}

Try in Swagger UI

POST/api/api-keys

Create API key

Generate a key. Copy apiKey from the response — it is shown once.

URL: https://api.actiwapi.com/api/api-keys

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Request example

{
  "name": "Production server",
  "permissions": ["messages:send", "messages:read", "sessions:read"]
}

Code examples

curl -X POST "https://api.actiwapi.com/api/api-keys" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"
  -d '{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}'

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys", {
    method: "POST",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
    body: JSON.stringify({
  "name": "Production server",
  "permissions": ["messages:send", "messages:read", "sessions:read"]
}),
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  body: JSON.stringify({
  "name": "Production server",
  "permissions": ["messages:send", "messages:read", "sessions:read"]
}),
});
const data = await res.json();
console.log(data);

import requests

response = requests.post(
    "https://api.actiwapi.com/api/api-keys",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
    json={
  "name": "Production server",
  "permissions": ["messages:send", "messages:read", "sessions:read"]
},
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Post.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"
request.body = "{  \"name\": \"Production server\",  \"permissions\": [\"messages:send\", \"messages:read\", \"sessions:read\"]}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_POSTFIELDS => '{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}',
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->post("https://api.actiwapi.com/api/api-keys", json_decode('{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}', true));

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;
using System.Text;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys";
var content = new StringContent("""
{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}
""", Encoding.UTF8, "application/json");
var response = await client.PostAsync(url, content);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;
using System.Text;
using System.Text.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapPost("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var content = new StringContent("""
{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}
""", Encoding.UTF8, "application/json");
    var request = new HttpRequestMessage(new HttpMethod("POST"), "https://api.actiwapi.com/api/api-keys")
    {
        Content = content,
    };
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"bytes"
	"fmt"
	"io"
	"net/http"
)

func main() {
	payload := []byte(`{  "name": "Production server",  "permissions": ["messages:send", "messages:read", "sessions:read"]}`)
	req, err := http.NewRequest("POST", "https://api.actiwapi.com/api/api-keys", bytes.NewBuffer(payload))
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys"))
    .method("POST", HttpRequest.BodyPublishers.ofString("{  \"name\": \"Production server\",  \"permissions\": [\"messages:send\", \"messages:read\", \"sessions:read\"]}"))
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example201

{
  "success": true,
  "data": {
    "id": "uuid",
    "name": "Production server",
    "keyPrefix": "awp_live_",
    "apiKey": "awp_live_xxxxxxxxxxxxxxxx",
    "permissions": ["messages:send", "messages:read", "sessions:read"]
  }
}

Try in Swagger UI

GET/api/api-keys/{id}

Get API key

Fetch one key’s metadata (no secret).

URL: https://api.actiwapi.com/api/api-keys/{id}

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Path parameters

id — API key UUID

Code examples

curl -X GET "https://api.actiwapi.com/api/api-keys/{id}" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
    method: "GET",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
  method: "GET",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.get(
    "https://api.actiwapi.com/api/api-keys/{id}",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/{id}")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Get.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/{id}");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/{id}");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/{id}";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.actiwapi.com/api/api-keys/{id}");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.actiwapi.com/api/api-keys/{id}", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/{id}"))
    .method("GET", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{ "success": true, "data": { "id": "uuid", "name": "Production server", "isActive": true } }

Try in Swagger UI

PUT/api/api-keys/{id}

Update API key

Rename or change permissions without rotating the secret.

URL: https://api.actiwapi.com/api/api-keys/{id}

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Path parameters

id — API key UUID

Request example

{ "name": "Staging", "permissions": ["sessions:read"] }

Code examples

curl -X PUT "https://api.actiwapi.com/api/api-keys/{id}" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"
  -d '{ "name": "Staging", "permissions": ["sessions:read"] }'

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
    method: "PUT",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
    body: JSON.stringify({ "name": "Staging", "permissions": ["sessions:read"] }),
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
  method: "PUT",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  body: JSON.stringify({ "name": "Staging", "permissions": ["sessions:read"] }),
});
const data = await res.json();
console.log(data);

import requests

response = requests.put(
    "https://api.actiwapi.com/api/api-keys/{id}",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
    json={ "name": "Staging", "permissions": ["sessions:read"] },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/{id}")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Put.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"
request.body = "{ \"name\": \"Staging\", \"permissions\": [\"sessions:read\"] }"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/{id}");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "PUT",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_POSTFIELDS => '{ "name": "Staging", "permissions": ["sessions:read"] }',
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->withBody('{ "name": "Staging", "permissions": ["sessions:read"] }', 'application/json')->put("https://api.actiwapi.com/api/api-keys/{id}");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;
using System.Text;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/{id}";
var content = new StringContent("""
{ "name": "Staging", "permissions": ["sessions:read"] }
""", Encoding.UTF8, "application/json");
var response = await client.PutAsync(url, content);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;
using System.Text;
using System.Text.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapPost("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var content = new StringContent("""
{ "name": "Staging", "permissions": ["sessions:read"] }
""", Encoding.UTF8, "application/json");
    var request = new HttpRequestMessage(new HttpMethod("PUT"), "https://api.actiwapi.com/api/api-keys/{id}")
    {
        Content = content,
    };
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"bytes"
	"fmt"
	"io"
	"net/http"
)

func main() {
	payload := []byte(`{ "name": "Staging", "permissions": ["sessions:read"] }`)
	req, err := http.NewRequest("PUT", "https://api.actiwapi.com/api/api-keys/{id}", bytes.NewBuffer(payload))
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/{id}"))
    .method("PUT", HttpRequest.BodyPublishers.ofString("{ \"name\": \"Staging\", \"permissions\": [\"sessions:read\"] }"))
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{ "success": true, "data": { "id": "uuid", "name": "Staging" } }

Try in Swagger UI

POST/api/api-keys/{id}/regenerate

Regenerate secret

Issue a new secret. The previous value stops working immediately.

URL: https://api.actiwapi.com/api/api-keys/{id}/regenerate

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Path parameters

id — API key UUID

Code examples

curl -X POST "https://api.actiwapi.com/api/api-keys/{id}/regenerate" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}/regenerate", {
    method: "POST",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}/regenerate", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.post(
    "https://api.actiwapi.com/api/api-keys/{id}/regenerate",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/{id}/regenerate")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Post.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/{id}/regenerate");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/{id}/regenerate");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/{id}/regenerate";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("POST"), "https://api.actiwapi.com/api/api-keys/{id}/regenerate");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("POST", "https://api.actiwapi.com/api/api-keys/{id}/regenerate", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/{id}/regenerate"))
    .method("POST", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{ "success": true, "data": { "id": "uuid", "apiKey": "awp_live_newsecret" } }

Try in Swagger UI

POST/api/api-keys/{id}/revoke

Revoke API key

Disable the key without deleting its analytics history.

URL: https://api.actiwapi.com/api/api-keys/{id}/revoke

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Path parameters

id — API key UUID

Code examples

curl -X POST "https://api.actiwapi.com/api/api-keys/{id}/revoke" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}/revoke", {
    method: "POST",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}/revoke", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.post(
    "https://api.actiwapi.com/api/api-keys/{id}/revoke",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/{id}/revoke")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Post.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/{id}/revoke");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "POST",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/{id}/revoke");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/{id}/revoke";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("POST"), "https://api.actiwapi.com/api/api-keys/{id}/revoke");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("POST", "https://api.actiwapi.com/api/api-keys/{id}/revoke", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/{id}/revoke"))
    .method("POST", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{ "success": true, "data": { "id": "uuid", "isActive": false } }

Try in Swagger UI

DELETE/api/api-keys/{id}

Delete API key

Permanently remove the key.

URL: https://api.actiwapi.com/api/api-keys/{id}

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Path parameters

id — API key UUID

Code examples

curl -X DELETE "https://api.actiwapi.com/api/api-keys/{id}" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
    method: "DELETE",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/{id}", {
  method: "DELETE",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.delete(
    "https://api.actiwapi.com/api/api-keys/{id}",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/{id}")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Delete.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/{id}");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "DELETE",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->delete("https://api.actiwapi.com/api/api-keys/{id}");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/{id}";
var response = await client.DeleteAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("DELETE"), "https://api.actiwapi.com/api/api-keys/{id}");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("DELETE", "https://api.actiwapi.com/api/api-keys/{id}", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/{id}"))
    .method("DELETE", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{ "success": true, "data": { "id": "uuid", "deleted": true } }

Try in Swagger UI

GET/api/api-keys/analytics/overview

Usage overview

Aggregate request volume, errors, and latency across keys.

URL: https://api.actiwapi.com/api/api-keys/analytics/overview

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Code examples

curl -X GET "https://api.actiwapi.com/api/api-keys/analytics/overview" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/analytics/overview", {
    method: "GET",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/analytics/overview", {
  method: "GET",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.get(
    "https://api.actiwapi.com/api/api-keys/analytics/overview",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/analytics/overview")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Get.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/analytics/overview");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/analytics/overview");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/analytics/overview";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.actiwapi.com/api/api-keys/analytics/overview");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.actiwapi.com/api/api-keys/analytics/overview", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/analytics/overview"))
    .method("GET", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{
  "success": true,
  "data": { "totalRequests": 1280, "errorRate": 0.02, "avgLatencyMs": 42 }
}

Try in Swagger UI

GET/api/api-keys/analytics/requests

Recent requests

Paginated log of /api/external calls.

URL: https://api.actiwapi.com/api/api-keys/analytics/requests

Auth: JWT Bearer

Headers

Header	Value	Required
Authorization	Bearer {accessToken}	Yes
Content-Type	application/json	Yes*

Query parameters

page — Page number
limit — Rows per page

Code examples

curl -X GET "https://api.actiwapi.com/api/api-keys/analytics/requests" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer {accessToken}"

async function callActiwapi() {
  const res = await fetch("https://api.actiwapi.com/api/api-keys/analytics/requests", {
    method: "GET",
    headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
  });

  if (!res.ok) {
    throw new Error(await res.text());
  }

  const data = await res.json();
  console.log(data);
}

callActiwapi();

import fetch from "node-fetch";

const res = await fetch("https://api.actiwapi.com/api/api-keys/analytics/requests", {
  method: "GET",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer {accessToken}"
  },
});
const data = await res.json();
console.log(data);

import requests

response = requests.get(
    "https://api.actiwapi.com/api/api-keys/analytics/requests",
    headers={
        "Content-Type": "application/json",
        "Authorization": "Bearer {accessToken}",
    },
)
print(response.json())

require "net/http"
require "uri"

uri = URI("https://api.actiwapi.com/api/api-keys/analytics/requests")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

request = Net::HTTP::Get.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer {accessToken}"

response = http.request(request)
puts response.body

$ch = curl_init("https://api.actiwapi.com/api/api-keys/analytics/requests");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "Authorization: Bearer {accessToken}"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

<?php

use Illuminate\Support\Facades\Http;

$headers = [
    'Content-Type' => 'application/json',
    'Authorization' => 'Bearer {accessToken}',
];

$response = Http::withHeaders($headers)->get("https://api.actiwapi.com/api/api-keys/analytics/requests");

$response->throw();
$data = $response->json();
dump($data);

using System.Net.Http;

using var client = new HttpClient();
client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");

var url = "https://api.actiwapi.com/api/api-keys/analytics/requests";
var response = await client.GetAsync(url);
var body = await response.Content.ReadAsStringAsync();
Console.WriteLine(body);

// .NET 8 — IHttpClientFactory style
using System.Net.Http.Json;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddHttpClient("Actiwapi", client =>
{
    client.DefaultRequestHeaders.TryAddWithoutValidation("Authorization", "Bearer {accessToken}");
});

var app = builder.Build();

app.MapGet("/proxy", async (IHttpClientFactory factory) =>
{
    var client = factory.CreateClient("Actiwapi");
    var request = new HttpRequestMessage(new HttpMethod("GET"), "https://api.actiwapi.com/api/api-keys/analytics/requests");
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
    return Results.Content(await response.Content.ReadAsStringAsync(), "application/json");
});

app.Run();

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.actiwapi.com/api/api-keys/analytics/requests", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer {accessToken}")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.actiwapi.com/api/api-keys/analytics/requests"))
    .method("GET", HttpRequest.BodyPublishers.noBody())
      .header("Content-Type", "application/json")
      .header("Authorization", "Bearer {accessToken}")
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

Response example200

{
  "success": true,
  "data": [{ "method": "POST", "path": "/api/external/messages/send-text", "status": 202, "durationMs": 18 }]
}

Try in Swagger UI

Error codes

Failed requests return a JSON envelope with success: false and a human-readable message.

{
  "success": false,
  "message": "Validation failed",
  "errors": {
    "phone": "Valid phone number is required"
  }
}

HTTP	Code	Description
400	VALIDATION_ERROR	Request body or query failed validation.
401	UNAUTHORIZED	Missing or invalid JWT / API key.
403	FORBIDDEN	Authenticated but lacking permission or entitlement.
403	SUBSCRIPTION_INACTIVE	Action not allowed on the current plan (including Free after trial). Upgrade or wait for entitlements.
403	LIMIT_EXCEEDED	Plan limit reached (sessions, messages, API requests, etc.).
404	NOT_FOUND	Resource does not exist or is not in your account.
409	CONFLICT	Duplicate resource or invalid state transition.
429	RATE_LIMITED	Too many requests; retry after backoff.
500	INTERNAL_ERROR	Unexpected server error.
502	WHATSAPP_UNAVAILABLE	WhatsApp session disconnected or provider error.