Authentication

Bot Master Sender uses token-based authentication to secure API requests. Every request must include your authToken to be processed successfully.

Getting Your Auth Token

Log in to your Bot Master Sender account
Navigate to the API Settings section
Generate or copy your existing auth token

Using Your Auth Token

Include your auth token in every API request using one of these methods:

GET Request

bash

https://domain.com/api/v5/?action=send&authToken=YOUR_AUTH_TOKEN&...

POST Requests

For URL-encoded:

bash

--data-urlencode 'authToken=YOUR_AUTH_TOKEN'

For JSON:

json

{
    "authToken": "YOUR_AUTH_TOKEN"
}

For Form Data:

bash

--form 'authToken="YOUR_AUTH_TOKEN"'

Security Best Practices

Keep it Secret: Never share your auth token or commit it to version control
Regular Rotation: Rotate your auth token periodically
Secure Storage: Store the token in environment variables or secure vaults
HTTPS Only: Always use HTTPS for API requests
Monitor Usage: Regularly check your API logs for unauthorized usage

Token Expiration

Tokens are valid until manually revoked
You can generate a new token at any time
Old tokens are automatically invalidated when new ones are generated

Rate Limiting

To protect our service and ensure fair usage:

Basic Plan: 100 requests per minute
Standard Plan: 500 requests per minute
Enterprise Plan: Custom limits available

Error Responses

If authentication fails, you'll receive:

json

{
    "status": "error",
    "code": "AUTH_ERROR",
    "message": "Invalid or expired auth token"
}