XEELAA API Key Guide

# 1. Verify API is working curl https://xeelaa.com/api/v2/verify # 2. Get your account info curl -H "Authorization: Bearer xla_keyId:secret" \ https://xeelaa.com/api/v2/me # 3. List your chatbots curl -H "Authorization: Bearer xla_keyId:secret" \ https://xeelaa.com/api/v2/chatbots # 4. Get chatbot settings (conversation starter) curl -H "Authorization: Bearer xla_keyId:secret" \ https://xeelaa.com/api/v2/chatbots/1/settings # 5. Create a conversation curl -X POST -H "Authorization: Bearer xla_keyId:secret" \ -H "Content-Type: application/json" \ -d '{"title": "Customer Support"}' \ https://xeelaa.com/api/v2/chatbots/1/conversations # 6. Send a message and get AI response curl -X POST -H "Authorization: Bearer xla_keyId:secret" \ -H "Content-Type: application/json" \ -d '{"message": "What products do you offer?"}' \ https://xeelaa.com/api/v2/chatbots/1/conversations/1/messages # 7. List conversations curl -H "Authorization: Bearer xla_keyId:secret" \ https://xeelaa.com/api/v2/chatbots/1/conversations?status=active # 8. Request human handoff curl -X POST -H "Authorization: Bearer xla_keyId:secret" \ https://xeelaa.com/api/v2/chatbots/1/conversations/1/handoff

// Your platform receives a request with X-API-Key header $receivedKey = $_SERVER['HTTP_X_API_KEY'] ?? ''; // For v2: split key_id:secret and validate $parts = explode(':', $receivedKey); if (count($parts) === 2) { [$keyId, $secret] = $parts; $computed = hash('sha256', $keyId . ':' . $secret); } else { // Legacy single-key format $computed = hash('sha256', $receivedKey); } // Look up the stored hash (you saved this from the dashboard) $storedHash = 'abc123...'; // From your database if (hash_equals($storedHash, $computed)) { // Valid! Process the request http_response_code(200); echo json_encode(['success' => true]); } else { // Invalid key http_response_code(401); echo json_encode(['error' => 'Invalid API key']); }

// Get conversation starter const settings = await fetch( 'https://xeelaa.com/api/v2/chatbots/1/settings?customer_name=John&logged_in=false' ).then(r => r.json()); // Show greeting console.log(settings.data.settings.greeting); // "Hello! How can I help you today?" // Show quick replies console.log(settings.data.settings.quick_replies); // Create conversation const conv = await fetch( 'https://xeelaa.com/api/v2/chatbots/1/conversations', { method: 'POST', headers: { 'Authorization': 'Bearer xla_keyId:secret', 'Content-Type': 'application/json' }, body: JSON.stringify({ title: 'Website Chat' }) } ).then(r => r.json()); // Send message const reply = await fetch( `https://xeelaa.com/api/v2/chatbots/1/conversations/${conv.data.id}/messages`, { method: 'POST', headers: { 'Authorization': 'Bearer xla_keyId:secret', 'Content-Type': 'application/json' }, body: JSON.stringify({ message: 'Hello!' }) } ).then(r => r.json()); // Show AI response console.log(reply.data.response);

// Your server receives a POST from XEELAA $payload = json_decode(file_get_contents('php://input'), true); $event = $_SERVER['HTTP_X_WEBHOOK_EVENT'] ?? ''; $webhookId = $_SERVER['HTTP_X_WEBHOOK_ID'] ?? ''; $timestamp = $_SERVER['HTTP_X_WEBHOOK_TIMESTAMP'] ?? ''; // Log the event error_log("Webhook received: {$event}"); // Handle different event types match ($event) { 'message.received' => handleNewMessage($payload), 'conversation.handoff' => handleHandoff($payload), 'whatsapp.message_received' => handleWhatsApp($payload), default => error_log("Unknown event: {$event}"), }; // Always return 200 to acknowledge receipt http_response_code(200); echo json_encode(['status' => 'received']);