Authentication.

API keys#

Create keys in the dashboard under API Keys. A live key is prefixed wz_live_; test keys are prefixed wz_test_. The key is shown once at creation — store it in a secret manager or environment variable.

Authorization header#

Pass the key in the Authorization header on every call.

Authorization: Bearer wz_live_...

Example request:

curl https://desk.whizztech.ai/v1/chat \
  -H "Authorization: Bearer wz_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "visitorId": "v_123", "message": "Do you ship to the UAE?" }'

Auth errors#

A missing or invalid key returns 401. Every error uses the same envelope, which the rest of the API shares:

{
  "error": {
    "code": "invalid_api_key",
    "message": "Missing or invalid API key. Pass it as: Authorization: Bearer wz_live_..."
  }
}