API Documentation

GET /v1/limits HTTP/1.1
Host: api-worker.agilizai.tech
Authorization: Bearer ak_live_xxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/json

{
  "phone": "+5511999999999",
  "setor_id": "set_abc123",
  "message": {
    "text": "Ola Maria! Seu agendamento para amanha as 14h esta confirmado."
  }
}

{
  "phone": "+5511999999999",
  "message": {
    "media_url": "https://cdn.example.com/comprovante.pdf",
    "media_type": "document"
  }
}

{
  "phone": "+5511999999999",
  "setor_id": "set_abc123",
  "message": {
    "template_name": "appointment_reminder",
    "template_language": "pt_BR",
    "template_components": [
      { "type": "body", "parameters": [{ "type": "text", "text": "Maria" }, { "type": "text", "text": "15/03/2026" }, { "type": "text", "text": "14:00" }] }
    ]
  }
}

{
  "success": true,
  "data": {
    "message_id": "msg_a1b2c3d4e5f6",
    "phone": "+5511999999999",
    "status": "sent",
    "timestamp": "2026-03-15T14:30:00.000Z"
  }
}

curl -X POST https://api-worker.agilizai.tech/v1/messages \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "phone": "+5511999999999",
    "setor_id": "set_abc123",
    "message": {
      "text": "Ola Maria! Seu agendamento para amanha as 14h esta confirmado."
    }
  }'

{
  "phone": "+5511999990001",
  "name": "Maria Silva",
  "message": "Ola Maria! Vi que você se cadastrou no nosso site. Como posso ajudar?",
  "setor_id": "set_abc123",
  "tags": ["tag_leads_site", "tag_interesse_premium"]
}

{
  "success": true,
  "data": {
    "message_id": "msg_a1b2c3d4e5f6",
    "client_id": "cli_xyz789",
    "sender_number": "+5551999001234",
    "sender_setor_id": "set_abc123",
    "affinity_created": true,
    "affinity_source": "first_contact"
  }
}

{
  "phone": "+5511999990001",
  "interactive": {
    "type": "button",
    "body": { "text": "Qual horário prefere para a visita?" },
    "action": {
      "buttons": [
        { "type": "reply", "reply": { "id": "btn_manha", "title": "Manha (9h-12h)" } },
        { "type": "reply", "reply": { "id": "btn_tarde", "title": "Tarde (14h-18h)" } },
        { "type": "reply", "reply": { "id": "btn_noite", "title": "Noite (19h-21h)" } }
      ]
    }
  }
}

{
  "phone": "+5511999990001",
  "interactive": {
    "type": "list",
    "body": { "text": "Selecione o servico desejado:" },
    "action": {
      "sections": [
        {
          "rows": [
            { "id": "srv_1", "title": "Consultoria", "description": "Sessao de 1 hora" },
            { "id": "srv_2", "title": "Implementacao", "description": "Setup completo" },
            { "id": "srv_3", "title": "Suporte", "description": "Atendimento tecnico" }
          ]
        }
      ]
    }
  }
}

{
  "success": true,
  "data": {
    "message_id": "msg_a1b2c3d4e5f6",
    "status": "sent",
    "phone": "+5511999990001",
    "interactive_type": "button",
    "timestamp": "2026-03-15T14:30:00.000Z"
  }
}

{
  "phone": "+5511999990001",
  "event": {
    "name": "Reuniao de Alinhamento",
    "description": "Revisao do projeto Q2",
    "startTime": 1741017600,
    "endTime": 1741021200,
    "location": "Sala 3, Escritorio Central"
  }
}

{
  "success": true,
  "data": {
    "message_id": "msg_a1b2c3d4e5f6",
    "status": "sent",
    "phone": "+5511999990001",
    "event_name": "Reuniao de Alinhamento",
    "start_time": 1741017600,
    "end_time": 1741021200,
    "timestamp": "2026-03-15T14:30:00.000Z"
  }
}

{
  "phone": "+5511999990001",
  "poll": {
    "name": "Qual o melhor dia para a entrega?",
    "options": ["Segunda", "Terca", "Quarta", "Quinta", "Sexta"],
    "multipleAnswers": true
  }
}

{
  "success": true,
  "data": {
    "message_id": "msg_a1b2c3d4e5f6",
    "status": "sent",
    "phone": "+5511999990001",
    "poll_name": "Qual o melhor dia para a entrega?",
    "options_count": 5,
    "timestamp": "2026-03-15T14:30:00.000Z"
  }
}

POST /v1/campaigns HTTP/1.1
Host: api-worker.agilizai.tech
Authorization: Bearer ak_live_xxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/json

{
  "name": "Promocao de Verao",
  "setor_id": "set_abc123",
  "recipients": [
    {
      "phone": "+5511999990001",
      "name": "Maria Silva"
    },
    {
      "client_id": "cli_def456"
    }
  ],
  "message": {
    "text": "{{saudacao}}, {{primeiro_nome}}! Confira nossa promocao especial.",
    "media_url": "https://cdn.exemplo.com/promo-verao.png",
    "media_type": "image",
    "media_delivery": "inline"
  },
  "options": {
    "schedule_at": "2026-03-10T10:00:00Z",
    "anti_ban_level": "seguro",
    "callback_url": "https://meusite.com/webhook"
  }
}

const crypto = require('crypto');

function verifyWebhookSignature(signedPayload, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(signedPayload, 'utf8')
    .digest('hex');

  if (Buffer.from(signature).length !== Buffer.from(expected).length) {
    return false;
  }
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

// Express middleware example
app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
  const webhookId = req.headers['x-webhook-id'];       // ID único da entrega
  const timestamp = req.headers['x-webhook-timestamp']; // Unix timestamp (segundos)
  const signature = req.headers['x-webhook-signature']; // HMAC-SHA256

  const payload = req.body.toString();
  const signedPayload = `${timestamp}.${payload}`;

  if (!verifyWebhookSignature(signedPayload, signature, process.env.WEBHOOK_SECRET)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  // Opcional: rejeitar webhooks com timestamp muito antigo (replay attack)
  const age = Math.floor(Date.now() / 1000) - parseInt(timestamp);
  if (age > 300) { // 5 minutos
    return res.status(401).json({ error: 'Timestamp too old' });
  }

  const event = JSON.parse(payload);
  console.log('Webhook event:', event.event, 'ID:', webhookId);

  switch (event.event) {
    case 'campaign.completed':
      // Campanha finalizada
      break;
    case 'message.sent':
      // Mensagem enviada com sucesso
      break;
    case 'message.failed':
      // Falha ao enviar mensagem
      break;
  }

  res.status(200).json({ received: true });
});

import hmac
import hashlib
import time
from flask import Flask, request, jsonify

app = Flask(__name__)
WEBHOOK_SECRET = "seu_webhook_secret"

def verify_signature(payload: bytes, timestamp: str, signature: str) -> bool:
    signed_payload = f"{timestamp}.{payload.decode('utf-8')}"
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        signed_payload.encode(),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

@app.route("/webhook", methods=["POST"])
def webhook():
    webhook_id = request.headers.get("X-Webhook-Id")
    timestamp = request.headers.get("X-Webhook-Timestamp", "")
    signature = request.headers.get("X-Webhook-Signature", "")

    if not verify_signature(request.data, timestamp, signature):
        return jsonify({"error": "Invalid signature"}), 401

    # Rejeitar timestamps antigos (> 5 min)
    age = int(time.time()) - int(timestamp)
    if age > 300:
        return jsonify({"error": "Timestamp too old"}), 401

    event = request.json
    print(f"Webhook {webhook_id}: {event['event']}")

    return jsonify({"received": True}), 200

{
  "success": false,
  "error": {
    "code": "BAD_REQUEST",
    "message": "name, setor_id, and recipients[] are required"
  }
}