API Documentation

Authentication

All requests must include your API key. Generate one from your dashboard under Profile → API Key.

Send the key as a bearer token, or as a query parameter:

Authorization: Bearer sv_live_xxxxxxxxxxxxxxxx

GET /api/v1/balance.php?api_key=sv_live_xxxxxxxxxxxxxxxx

Endpoints

Place an order

Request body (JSON):

{
  "server":  "server1",
  "country": "US",
  "service": "whatsapp"
}

Response:

{
  "success": true,
  "order": {
    "order_id": "ORD-20240101120000ABC",
    "number": "+12025550123",
    "price": 420.00,
    "status": "active",
    "expires_at": "2024-01-01 12:20:00"
  }
}

cURL

curl -X POST https://plugguysms.com/api/v1/order.php \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"server":"server1","country":"US","service":"whatsapp"}'

PHP

$ch = curl_init('https://plugguysms.com/api/v1/order.php');
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Authorization: Bearer YOUR_API_KEY', 'Content-Type: application/json']);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['server'=>'server1','country'=>'US','service'=>'whatsapp']));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = json_decode(curl_exec($ch), true);

JavaScript (fetch)

const res = await fetch('https://plugguysms.com/api/v1/order.php', {
  method: 'POST',
  headers: { 'Authorization': 'Bearer YOUR_API_KEY', 'Content-Type': 'application/json' },
  body: JSON.stringify({ server: 'server1', country: 'US', service: 'whatsapp' })
});
const order = await res.json();

Python

import requests
r = requests.post('https://plugguysms.com/api/v1/order.php',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    json={'server': 'server1', 'country': 'US', 'service': 'whatsapp'})
order = r.json()

Flutter / Dart

final res = await http.post(
  Uri.parse('https://plugguysms.com/api/v1/order.php'),
  headers: {'Authorization': 'Bearer YOUR_API_KEY', 'Content-Type': 'application/json'},
  body: jsonEncode({'server': 'server1', 'country': 'US', 'service': 'whatsapp'}),
);

Retrieve the SMS code

curl "https://plugguysms.com/api/v1/order-sms.php?id=ORD-20240101120000ABC" \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "success": true,
  "status": "completed",
  "number": "+12025550123",
  "sms_code": "482913",
  "sms_text": "Your WhatsApp verification code is 482913."
}

While the code has not arrived, status is waiting_sms. Poll every 5 seconds or rely on the sms.received webhook.

Webhooks

Set a webhook URL in your dashboard (Profile → Webhook). We send POST requests with JSON payloads signed using HMAC-SHA256 of the raw body with your webhook secret.

{
  "event": "sms.received",
  "order_id": "ORD-20240101120000ABC",
  "status": "completed",
  "phone_number": "+12025550123",
  "service": "whatsapp",
  "country": "US",
  "verification_code": "482913"
}

Verify signatures with the headers X-Webhook-Signature and X-Webhook-Event.

Error codes

Rate limits

Requests are limited per API key: 60 per minute and 1000 per hour. Exceeding the limit returns HTTP 429.