What is the Visito API?

The Visito API is a REST API for the Visito AI agent platform. It lets your backend read and send customer messages on WhatsApp, Instagram, Messenger and web chat, manage the AI agent, sync CRM and commerce data, and receive webhooks. The base URL is https://platform-api.visitoai.com/m2m/v1.

What can I build with it?

Common builds are a helpdesk that replies to WhatsApp customers, an AI agent that looks up live orders in your system, WhatsApp notifications from your backend, and a CRM that stays in sync with sales conversations.

Which plans include API access?

The Visito API and the MCP server are available on the Starter and Pro plans.

How does authentication work?

Create a server-side API key in the Developers area of the dashboard and send it as a bearer token. Each key belongs to one business and only has the permissions you choose. Keys can expire and can be revoked at any time.

Does Visito have an MCP server?

Yes. Connect https://platform-api.visitoai.com/m2m/v1/mcp in Claude, ChatGPT or Codex. You sign in with OAuth in the browser, and an admin approves which areas the assistant can read or change.

Is there an OpenAPI definition?

Yes. The OpenAPI definition at https://docs.visitoai.com/openapi.json covers every endpoint, scope, request body and error. Use it to generate a client or give it to an AI coding assistant.

Not yet. The API is plain REST and JSON, so any HTTP client works, and you can generate a typed client from the OpenAPI definition.

Can I send WhatsApp messages and templates through the API?

Yes. Reply in any existing conversation, start a new WhatsApp conversation, create templates for Meta review and send approved templates. Every send returns 202 Accepted and you can track it to delivered or read.

Which media can I send on each channel?

WhatsApp supports images, PDFs, audio, video and voice notes. Instagram supports images, audio and video. Messenger supports images, PDFs, audio and video.

Which webhook events does Visito send?

message.created, message.delivery.updated, conversation.handoff.updated, ticket.created, ticket.updated, crm.opportunity.created and crm.opportunity.updated. Every request is signed with HMAC-SHA256.

Can my AI agent call my own API during a conversation?

Yes. Create an HTTP action with a description, input schema and endpoint. The agent calls it when a customer needs live data, such as an order status, and every call is logged with its result.

Can I limit what a key can do?

Yes. Choose No access, Read or Read & write for each area, narrow it further to single actions, and set an expiry date. Refunds and payouts always need a human admin.

Can I send WhatsApp marketing campaigns with the API?

Yes. Create marketing templates, get them approved by Meta and send them from your backend to customers who opted in. Visito blocks sends to anyone who opted out and tracks every message to delivered or read.

Build on Visito with one API

Message customers on WhatsApp, Instagram, Messenger and web chat, connect your AI agent to your systems, and get signed webhooks when anything changes.

Get your API key Read the docs

REST and JSON. OpenAPI definition. MCP server for Claude, ChatGPT and Codex. Available on Starter and Pro.

POST /conversations/{conversationId}/reply

BASE_URL=https://platform-api.visitoai.com/m2m/v1curl "$BASE_URL/conversations/$CONVERSATION_ID/reply" \  -H "Authorization: Bearer $VISITO_API_KEY" \  -H "Idempotency-Key: order-A-1003-shipped" \  -H "Content-Type: application/json" \  -d '{"text": "Your order A-1003 is out for delivery."}'# 202 Accepted{  "accepted": true,  "replyId": "reply_8f2c",  "status": "queued"}

const BASE_URL = "https://platform-api.visitoai.com/m2m/v1";const response = await fetch(  BASE_URL + "/conversations/" + conversationId + "/reply",  {    method: "POST",    headers: {      Authorization: "Bearer " + process.env.VISITO_API_KEY,      "Idempotency-Key": "order-A-1003-shipped",      "Content-Type": "application/json",    },    body: JSON.stringify({ text: "Your order A-1003 is out for delivery." }),  },);// 202 Accepted, status "queued"const { replyId, status } = await response.json();

import osimport requestsBASE_URL = "https://platform-api.visitoai.com/m2m/v1"response = requests.post(    f"{BASE_URL}/conversations/{conversation_id}/reply",    headers={        "Authorization": f"Bearer {os.environ['VISITO_API_KEY']}",        "Idempotency-Key": "order-A-1003-shipped",    },    json={"text": "Your order A-1003 is out for delivery."},)# 202 Accepted, status "queued"reply_id = response.json()["replyId"]

Everything in Visito, available to your code

Six building blocks cover messaging, the AI agent, your team, revenue, channels and events.

Send and receive messages

Reply on WhatsApp, Instagram, Messenger and web chat, and follow every message until it is read.

POST /conversations/conv_123/reply
Idempotency-Key: order-A-1003
{ "text": "...", "media": { "type": "image" } }

GET /message-requests/event_456/status
{ "status": "read" }

Sofia

Is my order on its way?

Yes, A-1003 arrives tomorrow.Read

Read the guide

See all endpoints

Power your AI agent

Feed it your knowledge and let it call your backend for live answers.

POST /knowledge/url/crawl
{ "url": "https://visito-store.com" }

POST /actions
{ "family": "http", "configuration": {
  "name": "get_order_status", "mode": "active" } }

Returns policy

visito-store.com

Size guide.pdf

get_order_statusCompleted

Read the guide

See all endpoints

Hand off to your team

Pause the AI, assign a person and give the chat back once it is solved.

PATCH /conversations/conv_123/policy
{ "manualEnabled": true }

PUT /conversations/conv_123/assignment
{ "operatorId": "op_456" }
POST /conversations/conv_123/handoff/resolve

Refund requestHandoff

Assigned to Ana

AI paused for 30 min

Read the guide

See all endpoints

Sync sales and bookings

Move opportunities, follow-ups, orders and reservations between Visito and your systems.

GET /crm/sales/opportunities?status=open

PATCH /crm/sales/opportunities/opp_123
{ "revision": 5, "stageId": "stage_won" }

GET /commerce/sales/sale_789

New

Qualified

Won

Family suite, 3 nights$1,240

Read the guide

See all endpoints

Manage every channel

Check WhatsApp health, update your business profile and switch auto replies per channel.

GET /channels
GET /channels/ch_123/whatsapp/health

PATCH /channels/ch_123/respond-enabled
{ "respondEnabled": true }
PATCH /channels/ch_123/whatsapp/profile

WhatsAppConnected

InstagramConnected

MessengerConnected

Web chatConnected

Read the guide

See all endpoints

React to every event

Get a signed webhook the moment a message, handoff, ticket or deal changes.

POST /webhooks
{ "url": "https://api.example.com/visito",
  "events": ["message.created"] }

X-Visito-Signature: t=1760870400,v1=5f2b...
POST /webhooks/wh_123/rotate-secret

message.created200Signed

conversation.handoff.updated200Signed

crm.opportunity.updated200Signed

Read the guide

See all endpoints

Webhook events

message.created
message.delivery.updated
conversation.handoff.updated
ticket.created
ticket.updated
crm.opportunity.created
crm.opportunity.updated

The WhatsApp API, built in

Send campaigns, updates and replies on WhatsApp from your own code, and let your AI agent answer back.

Send marketing campaigns
Create marketing templates, get them approved by Meta and send promotions to opted-in customers from your backend.
Automate notifications
Send order updates, reminders and confirmations with utility templates the moment something happens in your system.
Start conversations your agent finishes
Open a WhatsApp conversation from your code. When the customer replies, your AI agent takes it from there.
Respect opt-outs automatically
Customers who reply STOP are flagged and Visito blocks further sends, even if your own list is out of date.

WhatsApp for business WhatsApp marketing WhatsApp templates guide

Put the pieces together

Most integrations combine a webhook, a read and a write.

Answer from your own helpdesk

1A message.created webhook tells your system a customer wrote in.
2Read the transcript and assign the right operator.
3Reply from your tool with an Idempotency-Key.
4Resolve the handoff so the AI takes over again.

# 1{ "type": "message.created", "data": { "conversationId": "conv_123", "direction": "inbound" } }# 2GET /conversations/conv_123/messages?limit=20PUT /conversations/conv_123/assignment{ "operatorId": "op_456" }# 3POST /conversations/conv_123/replyIdempotency-Key: evt_789-reply{ "text": "Your order A-1003 is out for delivery." }# 4POST /conversations/conv_123/handoff/resolve{ "resolutionNote": "Refund approved by the support team." }

Let the agent look up live orders

1Add your returns policy to the agent’s knowledge.
2Create an HTTP action that calls your order API.
3Check every call the agent made in the execution history.

# 1POST /knowledge/text{ "title": "Returns policy", "text": "Returns are free within 30 days of delivery." }# 2POST /actions{  "family": "http",  "configuration": {    "name": "get_order_status",    "description": "Look up the latest status of a customer order.",    "parameters": {      "type": "object",      "required": ["order_number"],      "properties": { "order_number": { "type": "string" } }    },    "endpoint": { "url": "https://api.example.com/orders/status", "method": "POST" },    "auth": { "type": "bearer", "value": "$ORDERS_API_TOKEN" },    "mode": "active"  }}# 3GET /action-executions?actionId=http:act_123

Send WhatsApp updates from your backend

1Find the WhatsApp channel to send from.
2Send an approved template when an order ships.
3Track the send until it is delivered or read.

# 1GET /channels# 2POST /whatsapp-templates/ch_123/sendIdempotency-Key: order-A-1003-shipped{  "to": "+15555550100",  "template": {    "name": "order_shipped",    "language": { "code": "en_US" },    "components": [      { "type": "body", "parameters": [{ "type": "text", "text": "A-1003" }] }    ]  }}# 3GET /message-requests/event_456/status

Keep your CRM in step

1A crm.opportunity.updated webhook arrives.
2Read the opportunity and its linked contact.
3Write the new stage back with the current revision.

# 1{ "type": "crm.opportunity.updated", "data": { "opportunityId": "opp_123", "leadId": "lead_456" } }# 2GET /crm/sales/opportunities/opp_123GET /crm/sales/opportunities/opp_123/contact# 3PATCH /crm/sales/opportunities/opp_123{ "revision": 5, "stageId": "stage_won" }

Use Visito from Claude, ChatGPT and Codex

Connect the Visito MCP server and work with your conversations, tickets and settings in plain language.

MCP server

https://platform-api.visitoai.com/m2m/v1/mcp

Sign in, no keys in chat
You connect with OAuth in the browser. No password or API key is pasted into a conversation.
An admin approves access
Choose Read or Read & write for each area, the same permissions as API keys.
The whole API as tools
Read a business overview, find conversations, explain an answer and manage tickets.

MCP setup guide

# Add the server, then sign in with your Visito admin accountcodex mcp add visito \  --url https://platform-api.visitoai.com/m2m/v1/mcpcodex mcp login visito

Help me connect Visito using this remote MCP server. Name it Visito and use OAuth sign-in.https://platform-api.visitoai.com/m2m/v1/mcp

Help me connect Visito using this remote MCP server. Name it Visito and use OAuth sign-in.https://platform-api.visitoai.com/m2m/v1/mcp

Try asking

What did customers ask about most this week?
Which conversations are still waiting for a reply?
Why did the agent give this answer?

Building with an AI coding assistant?

Give it the OpenAPI definition and the AI coding assistants guide, so it uses real endpoints and the right retry rules.

OpenAPI definition AI coding assistants guide

Built for production traffic

Permissions, retries and failures behave the same way everywhere in the API.

Least-privilege keys

Each key belongs to one business. Choose No access, Read or Read & write per area, set an expiry and revoke any time.

Safe retries

Sends require an Idempotency-Key. Retrying returns the original request instead of messaging the customer twice.

Tracked delivery

Sends return 202 Accepted right away. Follow each one through to delivered, read or failed.

No silent overwrites

CRM, ticket and action updates need the current revision. A stale write gets a 409 instead of replacing someone’s change.

Signed webhooks

HMAC-SHA256 signatures with timestamps, at-least-once delivery and six automatic retries over 24 hours.

People decide on money

Refunds and payouts always need a human admin, whatever permissions a key has.

Keys, webhooks and logs in one place

Your team manages API access and checks every send from the Developers area of the Visito dashboard.

API keys and apps

Keys and connected AI assistants in one list, with permissions, status and when each was last used.

Webhooks

Every endpoint with its events, who manages it and how the latest delivery went.

WhatsApp templates

A log of every template request, with its request status, delivery status and conversation.

Make your first call in four steps

From a new key to a tracked reply.

1
Create a key
In Developers, create a key with only the permissions you need. Keep it on your server.
2
Find your channels
List channels and store the ID of the one you want to use.
3
See what is waiting
List the conversations that need a reply.
4
Reply and track it
Send a reply with an Idempotency-Key, then check its status.

https://platform-api.visitoai.com/m2m/v1

# 1export VISITO_API_KEY="visito_m2m_..."export BASE_URL=https://platform-api.visitoai.com/m2m/v1# 2curl "$BASE_URL/channels" \  -H "Authorization: Bearer $VISITO_API_KEY"# 3curl "$BASE_URL/conversations?view=needs_reply&limit=25" \  -H "Authorization: Bearer $VISITO_API_KEY"# 4curl "$BASE_URL/conversations/$CONVERSATION_ID/reply" \  -H "Authorization: Bearer $VISITO_API_KEY" \  -H "Idempotency-Key: first-reply-001" \  -H "Content-Type: application/json" \  -d '{"text": "Your order A-1003 is out for delivery."}'curl "$BASE_URL/message-requests/$REQUEST_EVENT_ID/status" \  -H "Authorization: Bearer $VISITO_API_KEY"

Questions about the Visito API

Start building with the Visito API

Create your account, generate a key and make your first call today.

Get your API key Read the docs

Build on Visito with one API

Everything in Visito, available to your code

Send and receive messages

Power your AI agent

Hand off to your team

Sync sales and bookings

Manage every channel

React to every event

Webhook events

The WhatsApp API, built in

Send marketing campaigns

Automate notifications

Start conversations your agent finishes

Respect opt-outs automatically

Put the pieces together

Answer from your own helpdesk

Use Visito from Claude, ChatGPT and Codex

Sign in, no keys in chat

An admin approves access

The whole API as tools

Try asking

Building with an AI coding assistant?

Built for production traffic

Least-privilege keys

Safe retries

Tracked delivery

No silent overwrites

Signed webhooks

People decide on money

Keys, webhooks and logs in one place

API keys and apps

Webhooks

WhatsApp templates

Make your first call in four steps

Create a key

Find your channels

See what is waiting

Reply and track it

Questions about the Visito API

What is the Visito API?

What can I build with it?

Which plans include API access?

How does authentication work?

Does Visito have an MCP server?

Is there an OpenAPI definition?

Do you have SDKs?

Can I send WhatsApp messages and templates through the API?

Which media can I send on each channel?

Which webhook events does Visito send?

Can my AI agent call my own API during a conversation?

Can I limit what a key can do?

Can I send WhatsApp marketing campaigns with the API?

Start building with the Visito API