Configuration

API Reference

Base URL: https://api.wscrut.silnt.in

Authentication

Method	Header	Used for
Bearer	Authorization: Bearer wsc_live_xxx	REST webhook submissions from external systems
Session	Cookie: wscrut_session=...	Dashboard API calls (automatically set after login)
Telegram	(set by Telegram)	Telegram bot webhook — verified via bot token
Twilio	X-Twilio-Signature	WhatsApp callbacks — verified via HMAC

Endpoints

Method	Path	Auth	Description
POST	/webhooks/telegram/{tenantId}	Telegram	Receive Telegram bot messages and callbacks
POST	/webhooks/http/{tenantId}	Bearer	Submit a claim via REST API (multipart/form-data)
POST	/webhooks/whatsapp/{tenantId}	Twilio	Receive WhatsApp messages via Twilio
GET	/tenants/{tenantId}/claims	Session	List all claims for a tenant
GET	/tenants/{tenantId}/queue	Session	Claims awaiting human review
GET	/tenants/{tenantId}/stats	Session	Dashboard statistics
POST	/tenants/{tenantId}/approve/{ticketId}	Session	Approve a claim (human reviewer)
POST	/tenants/{tenantId}/reject/{ticketId}	Session	Reject a claim (human reviewer)
POST	/tenants/{tenantId}/apikeys	Session	Generate a new API key
DELETE	/tenants/{tenantId}/apikeys/{keyId}	Session	Revoke an API key
PUT	/tenants/{tenantId}/config	Session	Update tenant configuration (branding, channels)
GET	/auth/me	Session	Get current tenant profile

Rate limits

Webhook submissions: 60 requests/minute per API key
Dashboard API: 200 requests/minute per session
Auth endpoints: 5 attempts/15 minutes per IP

Dashboard Guide →Get API key