Verified with a single call

Authorization: YOUR-API-KEY

// success
{ "success": true,  "data": { ... },  "meta": { "request_id": "..." } }

// error
{ "success": false, "error": { "code": "...", "message": "...", "details": { } }, "meta": { "request_id": "..." } }

curl -X POST 'https://wa.sendpk.com/apps/whatsapp_call_verification/start.php' \
  -H 'Authorization: YOUR-API-KEY' \
  -H 'Content-Type: application/json' \
  -d '{"number": "923001234567"}'

<?php
$ch = curl_init('https://wa.sendpk.com/apps/whatsapp_call_verification/start.php');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: YOUR-API-KEY',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => json_encode(['number' => '923001234567']),
]);
$result = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($result['success']) {
    $id     = $result['data']['id'];       // save this
    $callTo = $result['data']['call_to'];  // show this to the user
} else {
    echo $result['error']['message'];
}

// Node.js 18+ (built-in fetch)
const res = await fetch('https://wa.sendpk.com/apps/whatsapp_call_verification/start.php', {
  method: 'POST',
  headers: {
    'Authorization': 'YOUR-API-KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ number: '923001234567' }),
});
const result = await res.json();

if (result.success) {
  const { id, call_to } = result.data;   // save id, show call_to
  console.log(id, call_to);
} else {
  console.log(result.error.message);
}

import requests

r = requests.post(
    "https://wa.sendpk.com/apps/whatsapp_call_verification/start.php",
    headers={"Authorization": "YOUR-API-KEY"},
    json={"number": "923001234567"},
    timeout=15,
)
result = r.json()

if result["success"]:
    request_id = result["data"]["id"]       # save this
    call_to = result["data"]["call_to"]     # show this to the user
else:
    print(result["error"]["message"])

{
  "success": true,
  "data": {
    "id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058",
    "status": "pending",
    "verified": false,
    "number": "+923001234567",
    "call_to": "+923356742000",
    "call_link": "https://wa.me/call/923356742000",
    "created_at": "2026-10-12T11:34:44+05:00",
    "expires_at": "2026-10-12T11:39:44+05:00",
    "expires_in": 300,
    "verified_at": null,
    "audio": "default",
    "price": { "amount": 1, "currency": "PKR", "charged": false, "charged_amount": 0 },
    "call": { "attempts": 0, "rejected": 0, "connected_seconds": null, "last_call_at": null },
    "error": null,
    "webhook": null
  },
  "meta": { "request_id": "01a12ed2-1e02-7c11-9b2a-3c4d5e6f7a8b" }
}

curl 'https://wa.sendpk.com/apps/whatsapp_call_verification/status.php?id=01a12ed2-1dff-7f6d-aa29-1240cf92c058' \
  -H 'Authorization: YOUR-API-KEY'

<?php
$id = '01a12ed2-1dff-7f6d-aa29-1240cf92c058';

$ch = curl_init('https://wa.sendpk.com/apps/whatsapp_call_verification/status.php?id=' . urlencode($id));
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: YOUR-API-KEY'],
]);
$result = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($result['success'] && $result['data']['verified']) {
    // The number is verified - log the user in.
}

const id = '01a12ed2-1dff-7f6d-aa29-1240cf92c058';

const res = await fetch(`https://wa.sendpk.com/apps/whatsapp_call_verification/status.php?id=${encodeURIComponent(id)}`, {
  headers: { 'Authorization': 'YOUR-API-KEY' },
});
const result = await res.json();

if (result.success && result.data.verified) {
  // The number is verified - log the user in.
}

import requests

r = requests.get(
    "https://wa.sendpk.com/apps/whatsapp_call_verification/status.php",
    headers={"Authorization": "YOUR-API-KEY"},
    params={"id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058"},
    timeout=15,
)
result = r.json()

if result["success"] and result["data"]["verified"]:
    pass  # The number is verified - log the user in.

{
  "success": true,
  "data": {
    "id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058",
    "status": "verified",
    "verified": true,
    "number": "+923001234567",
    "call_to": "+923356742000",
    "call_link": "https://wa.me/call/923356742000",
    "created_at": "2026-10-12T11:34:44+05:00",
    "expires_at": "2026-10-12T11:39:44+05:00",
    "expires_in": 0,
    "verified_at": "2026-10-12T11:35:45+05:00",
    "audio": "default",
    "price": { "amount": 1, "currency": "PKR", "charged": true, "charged_amount": 1 },
    "call": { "attempts": 1, "rejected": 0, "connected_seconds": 6, "last_call_at": "2026-10-12T11:35:35+05:00" },
    "error": null,
    "webhook": {
      "url": "https://example.com/webhooks/whatsapp-call",
      "status": "sent",
      "last_event": "billing.charged",
      "delivered": 2,
      "last_http_code": 200,
      "last_try_at": "2026-10-12T11:35:47+05:00"
    }
  },
  "meta": { "request_id": "01a12ed3-0a11-7d22-8e33-4f5a6b7c8d9e" }
}

curl -X POST 'https://wa.sendpk.com/apps/whatsapp_call_verification/cancel.php' \
  -H 'Authorization: YOUR-API-KEY' \
  -H 'Content-Type: application/json' \
  -d '{"id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058"}'

<?php
$ch = curl_init('https://wa.sendpk.com/apps/whatsapp_call_verification/cancel.php');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => ['Authorization: YOUR-API-KEY', 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS     => json_encode(['id' => '01a12ed2-1dff-7f6d-aa29-1240cf92c058']),
]);
$result = json_decode(curl_exec($ch), true);
curl_close($ch);

await fetch('https://wa.sendpk.com/apps/whatsapp_call_verification/cancel.php', {
  method: 'POST',
  headers: { 'Authorization': 'YOUR-API-KEY', 'Content-Type': 'application/json' },
  body: JSON.stringify({ id: '01a12ed2-1dff-7f6d-aa29-1240cf92c058' }),
});

import requests

requests.post(
    "https://wa.sendpk.com/apps/whatsapp_call_verification/cancel.php",
    headers={"Authorization": "YOUR-API-KEY"},
    json={"id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058"},
    timeout=15,
)

{
  "number": "923001234567",
  "audio_url": "https://example.com/audio/welcome.mp3"
}

curl -X POST 'https://wa.sendpk.com/apps/whatsapp_call_verification/start.php' \
  -H 'Authorization: YOUR-API-KEY' \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: login-7f3a9c' \
  -d '{"number": "923001234567"}'

{
  "number": "923001234567",
  "notification_callback": "https://example.com/webhooks/whatsapp-call"
}

POST /webhooks/whatsapp-call HTTP/1.1
Host: example.com
Content-Type: application/json
User-Agent: SENDPK-Webhook/1.0
X-SENDPK-Event: verification.verified
X-SENDPK-Event-Id: 3f2b1c0d-9e8f-5a7b-8c6d-5e4f3a2b1c0d
X-SENDPK-Signature: sha256=<hex HMAC-SHA256 of the raw body>

{
  "event": "verification.verified",
  "event_id": "3f2b1c0d-9e8f-5a7b-8c6d-5e4f3a2b1c0d",
  "created_at": "2026-10-12T11:35:46+05:00",
  "data": {
    "id": "01a12ed2-1dff-7f6d-aa29-1240cf92c058",
    "status": "verified",
    "verified": true,
    "number": "+923001234567",
    ...the other fields of Check Status
  }
}

<?php
// https://example.com/webhooks/whatsapp-call
$raw      = file_get_contents('php://input');
$expected = 'sha256=' . hash_hmac('sha256', $raw, 'YOUR-API-KEY');
$given    = $_SERVER['HTTP_X_SENDPK_SIGNATURE'] ?? '';

if (!hash_equals($expected, $given)) {
    http_response_code(401);
    exit;
}

$event = json_decode($raw, true);

// Skip repeats: remember $event['event_id'] for a day.
if ($event['event'] === 'verification.verified') {
    $requestId = $event['data']['id'];       // your saved request id
    $number    = $event['data']['number'];   // this number is verified
}
http_response_code(200);

// Express - keep the raw body for the signature check
const crypto = require('crypto');
const express = require('express');
const app = express();

app.post('/webhooks/whatsapp-call', express.raw({ type: 'application/json' }), (req, res) => {
  const expected = 'sha256=' + crypto.createHmac('sha256', 'YOUR-API-KEY').update(req.body).digest('hex');
  const given = req.get('X-SENDPK-Signature') || '';

  if (given.length !== expected.length ||
      !crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(given))) {
    return res.sendStatus(401);
  }

  const event = JSON.parse(req.body.toString('utf8'));
  res.sendStatus(200);                 // answer first

  if (event.event === 'verification.verified') {
    console.log('verified', event.data.id, event.data.number);
  }
});

# Flask
import hashlib, hmac, json
from flask import Flask, request

app = Flask(__name__)

@app.post("/webhooks/whatsapp-call")
def whatsapp_call_webhook():
    raw = request.get_data()
    expected = "sha256=" + hmac.new(b"YOUR-API-KEY", raw, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(expected, request.headers.get("X-SENDPK-Signature", "")):
        return "", 401

    event = json.loads(raw)
    if event["event"] == "verification.verified":
        print("verified", event["data"]["id"], event["data"]["number"])
    return "", 200