Scoped API keys
Use a purpose-specific key instead of a teammate password. Access remains limited by workspace, plan, module and granted scope.
What the platform exposes
Supported operations
Messaging, contacts and selected WhatsApp and Instagram management operations are available where documented and permitted.
Webhooks
Receive supported real-time events without polling. Consumers must verify, deduplicate and retry safely.
The contract is the manual
The authenticated developer manual inside MirageCHAT is the canonical list of endpoints, fields and permissions. This public page intentionally does not promise that every internal screen is a public endpoint.
Integration options
An existing operational screen can open inside a conversation with approved context. A system with an API can instead be mapped into a purpose-built panel. Keep provider credentials server-side and grant access only to the accounts and teammates that need it.