One Messaging API for every channel

The Thikaa Messaging API lets your apps and systems send and receive messages on every channel your business has connected — without integrating each platform separately. You get the same delivery pipeline, billing and inbox your AI bot uses.

1Base URL & key

Generate a key in your dashboard. Each key is an "instance" with its own channels and webhook. Your base URL looks like:

https://thikaa.com/<your-account>/api/messaging/

Authorization: Bearer tk_live_xxxxxxxxxxxxxxxxxxxxxxxx

2Send a message

POST ?action=send

copycurl -X POST 'https://thikaa.com/<your-account>/api/messaging/?action=send' \
  -H 'Authorization: Bearer tk_live_xxxx' \
  -H 'Content-Type: application/json' \
  -d '{
    "channel": "wd",
    "to": "+9665XXXXXXXX",
    "message": "Your order has shipped 🚚✅"
  }'

3Media & emoji

Emoji work on every channel (UTF-8 text). Media is attached via media_url:

copy{ "channel":"wd", "to":"+9665XXXXXXXX",
  "message":"فاتورتك 📄", "media_url":"https://you.com/invoice.pdf", "media_type":"document" }

4Receive messages (webhooks)

Set an HTTPS webhook on your key. Every incoming customer message — text, emoji and media — is POSTed to it, signed with HMAC-SHA256:

X-Thikaa-Event: message.received
X-Thikaa-Signature: sha256=<hmac>

{ "event":"message.received", "instance_id":"inst_xxxx",
  "data": { "channel":"wd", "from":"+9665XXXXXXXX",
    "text":"شكراً 🌹",
    "attachments":[{"type":"audio","url":"https://thikaa.com/.../voice.ogg"}] } }

Verify the signature

$secret = 'YOUR_SIGNING_SECRET';
$body   = file_get_contents('php://input');
$ok = hash_equals('sha256=' . hash_hmac('sha256', $body, $secret),
                  $_SERVER['HTTP_X_THIKAA_SIGNATURE'] ?? '');

5Status & errors

GET ?action=status — instance status, channels, balance.