Wafleet
Unofficial WhatsApp API · Built for growing teams

The honest WhatsApp gateway.

Send messages, run broadcasts, and automate replies from one API. We publish our real ban rate at /trust, with no anti-ban badge and no get-rich-quick promises.

Free beta 0 / 20 slots filled

Unofficial WhatsApp channel - your number could be banned, so use it at your own risk. We cap this beta at 20 numbers to measure the real ban rate in the open.

30-day SafeMode pledge: if a compliant number gets permanently banned, we credit you a month. The only gateway that puts money on its anti-ban claims.
Free forever tier No credit card Cards & e-wallets OpenAPI 3.1 spec
Live ban rate · our pledge
We publish at N≥50

No spin, no hidden numbers. The real ban rate goes live here the moment it is statistically honest (2 devices tracked so far). "100% Anti-Banned" is the market's favorite claim, and it never comes with public data. We would rather show nothing than fake it.

See our methodology
Marketing broadcasts
Promos to opted-in lists, paced to stay safe
OTP & order updates
Transactional sends via a simple API
Support automation
Auto-replies and keyword routing
A real API, not a hobby project

Send your first WhatsApp in 30 seconds.

OpenAPI 3.1 spec, idempotent endpoints, HMAC-signed webhooks, and an audit log on every mutation.

  • One Bearer token, scoped per organization. Argon2id-hashed, never visible after creation.
  • Status webhooks for every state: queued, sent, delivered, read, failed.
  • Live OpenAPI explorer at /docs with copy-paste examples.
$ curl -X POST https://api.wafleet.com/v1/messages/send \
  -H "Authorization: Bearer wf_live_xxxxx" \
  -H "Content-Type: application/json" \
  -d '{"to":"14155550100","text":"Hello from Wafleet"}'

{
  "id": "msg_abc123",
  "status": "queued",
  "to": "14155550100"
}
await fetch('https://api.wafleet.com/v1/messages/send', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer wf_live_xxxxx',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    to: '14155550100',
    text: 'Hello from Wafleet',
  }),
});
$ch = curl_init('https://api.wafleet.com/v1/messages/send');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'Authorization: Bearer wf_live_xxxxx',
    'Content-Type: application/json',
  ],
  CURLOPT_POSTFIELDS => json_encode([
    'to' => '14155550100',
    'text' => 'Hello from Wafleet',
  ]),
]);
$res = curl_exec($ch);
import requests

requests.post(
  'https://api.wafleet.com/v1/messages/send',
  headers={
    'Authorization': 'Bearer wf_live_xxxxx',
  },
  json={
    'to': '14155550100',
    'text': 'Hello from Wafleet',
  },
)
Honest about what we are

There are two ways to send WhatsApp. We do one of them well.

Wafleet is the unofficial WhatsApp API. That means lower cost, faster setup, works with any WhatsApp number. The trade-off is that Meta can ban a number if usage looks abusive. We don't pretend otherwise.

What we run

Our WhatsApp gateway

The unofficial protocol. Connect any WhatsApp number with a QR scan and start sending in minutes. No Meta approval, no Business Verification, no template review queues.

  • Pair via QR in under 2 minutes
  • Flat monthly pricing, no per-message charges
  • Send any content, any time
  • Real ban risk, mitigated with anti-ban discipline
Where we refer you

Meta's official Cloud API

For zero ban risk, regulated industries, or enterprise compliance, you need Meta's officially-sanctioned protocol. We don't run it. We'll point you to a reputable Meta-certified partner instead of pretending.

  • Verified business account required
  • Per-conversation Meta pricing
  • Templates pre-approved by Meta
  • Zero ban risk by design

Most gateways won't even acknowledge Cloud API exists, because they don't have a clean handoff to it. We tell you upfront, because lock-in is the opposite of trust.

Anti-ban as a system

Four layers of discipline. Not a marketing checkbox.

Other gateways advertise an "anti-ban filter" and call it a day. We treat anti-ban as engineering: every outbound message passes through four layers, each tuned to keep your number off Meta's flags.

01

Warmup curve

Day 1 cap is 10 sends. Ramps to unlimited over 5 days. Mirrors how a human number naturally builds activity.

02

Adaptive jitter

3-7 second randomized gaps between sends (6-14 in SafeMode), with bonus delay on first contact. Never the metronomic pattern Meta flags.

03

Circuit breaker

10 consecutive send failures pauses the device automatically. Stops a misbehaving number from making the whole platform look bad.

04

Anti-ban Score

0-100 per device, refreshed every minute. Webhook fires when a device drops below 40, so you can react before Meta does.

SafeMode

Run 30 days SafeMode-compliant. We bet a month free your number won't get permanently banned.

SafeMode locks every safety setting, halves all caps, and enforces recipient blocklist. If your number permanently bans after 30+ days of compliance, we credit you 1 month. The only WA gateway that puts money on its own anti-ban claims.

Try SafeMode free
Everything you actually need

No 35-feature wall. Just the things that matter.

Multi-tenant by design

Organizations, members, role-based access, audit log on every mutation. Built for agencies and teams from day one.

Broadcasts that pace themselves

CSV upload, {{variable}} templates, adaptive jitter, sticky-recipient routing. Send 10,000 messages without looking like a bot.

HMAC-signed webhooks

Every event signed with HMAC-SHA256 plus timestamp. Retries on failure: 1m, 5m, 30m, 2h, 12h, dead-letter. Replay UI in dashboard.

OpenAPI 3.1, live explorer

Auto-generated from route schemas via Scalar. Try every endpoint in your browser without leaving /docs.

Audit log on every change

Login, device pair, key rotation, broadcast send, settings change. Privacy-law ready, queryable from audit_log.

Flexible payments

Cards, bank transfer, and popular e-wallets. Annual billing with 20% off. Tax-compliant invoicing.

Pricing

Flat-rate pricing. No per-message games.

We don't charge per-message because that signals "official Cloud API" and triggers sticker shock. Pick a tier, send what you need within fair use.

Free beta

Everything is free during the beta - no card, no charge. The prices below are indicative for the paid launch after we have proven the ban rate.

Free

$0 / mo
Start free
  • 1 device
  • 200 messages / month
  • 1 team agent
  • 7 days inbound retention
  • Watermark on broadcasts

Starter

$5 / mo
Free during the beta
Choose Starter
  • 1 device
  • 5,000 messages / month
  • 3 team agents
  • 30 days inbound retention
  • SafeMode optional
Most popular

Pro

SafeMode
$15 / mo
Free during the beta
Choose Pro
  • 1 device
  • Unlimited messages
  • Unlimited team agents
  • 90 days inbound retention
  • SafeMode included with credit guarantee
  • + $5/mo per extra device

Business

SafeMode
$39 / mo
Free during the beta
Choose Business
  • 5 devices
  • Unlimited messages
  • Unlimited team agents
  • 365 days inbound retention
  • SafeMode included with credit guarantee
  • White-label (logo + custom domain)
  • + $4/mo per extra device

Agency

SafeMode
$129 / mo
Free during the beta
Choose Agency
  • 25 devices
  • Unlimited messages
  • Unlimited team agents
  • 3650 days inbound retention
  • SafeMode included with credit guarantee
  • White-label (full reseller)
  • Sub-accounts + reseller billing
  • + $2/mo per extra device

Enterprise

Custom
Volume, dedicated infra, SLA
Talk to sales
  • Custom device + message limits
  • 99.9% SLA + custom support window
  • Static webhook IP available
  • Custom DPA, security review

All paid tiers include unlimited team agents, full HMAC webhooks, and audit log. Cancel anytime, no lock-in. Tax-inclusive invoicing.

The honest WhatsApp gateway pledge

We publish our system-wide ban rate. They don't.

"100% Anti-Banned WABA" is a common pitch in this market, never with public data behind it, while the same providers' own terms quietly admit "resiko banned tetap ada." Wafleet does the opposite: a live ban rate at /trust, no numbers published without enough sample size, and public methodology.

Read the trust page
FAQ

Questions buyers actually ask.

Are you the official WhatsApp API?
No. Wafleet's gateway is the unofficial WhatsApp API, the same protocol WhatsApp Web uses. It's faster to launch, cheaper, and works with regular WhatsApp numbers, not just verified business accounts. The trade-off is real ban risk, which we mitigate with anti-ban discipline as a system, publish at /trust, and refer you to a Meta-certified BSP if you need the official Cloud API.
What's your real ban rate?
We don't have enough tracked devices yet to publish a meaningful number (2 currently, we publish at N≥50). We refuse to display a percentage that's more marketing than truth. The number lands on /trust the moment we have valid data.
What happens if my number gets banned?
Most bans are temporary (24-72h) and auto-recover; we pause sending and queue messages for replay when WhatsApp restores the number. Permanent bans require a fresh number, which you can register into the same device slot at no extra cost. We don't refund banned numbers because most bans are caused by content, recipient lists, or volume choices that you control. Exception: if our logs show our system failed to enforce its own rate limits, we credit you pro-rata. SafeMode customers running 30+ days compliant get an additional 1-month credit on permanent ban.
Can I use this for transactional messages, not just marketing?
Yes, that's a common use case. OTP delivery, order confirmations, shipping updates, customer support replies, all work great on the unofficial gateway because they're low-volume, recipient-initiated, and have natural variance. Watermarks (Free tier only) apply to broadcasts, never transactional sends.
What payment methods do you accept?
Cards, bank transfer, and popular e-wallets. Annual billing gets 20% off. Cancel anytime; we don't auto-charge after expiry without your re-approval.
Can I migrate to Meta's official Cloud API later?
Yes, but not through us. Cloud API requires a Meta-certified Business Solution Provider (BSP) and we're deliberately not one (running both unofficial gateway and official BSP under one brand violates Meta's terms). When you outgrow Wafleet, we'll refer you to 360dialog, Wati, or MessageBird. We make the handoff well-lit: short doc, named partner contacts, no commission games.
Is there a free tier? What's the catch?
Free forever, 1 device, 200 messages/month, watermark on broadcasts only (transactional sends stay clean). Genuinely free, not a 15-day trial that converts into a paywall. The catch: at our 50-device VPS cap, free slots may queue if everyone wants one at once, with paid users prioritized. SafeMode is paid-tier; webhook replay is paid-tier; everything else (API, broadcasts, templates, dashboards) works on free.
Do you have an SDK or library?
The API is a clean REST surface, so any HTTP client works. Auto-generated OpenAPI 3.1 spec at /docs means you can generate a typed client in any language with one command. Official MIT-licensed SDKs for TypeScript, PHP, and Python are on the Phase 8 roadmap.

Build your WhatsApp infrastructure on something honest.

Free to start. No credit card. No 15-day trial cliff. Send your first message in under two minutes.

Claim a free slot · 20 left