← 返回 Skills 市场

P-API - WhatsApp API

Name: P-API - WhatsApp API
Author: rafacpti23

作者 Rafa Martins · GitHub ↗ · v1.2.1

cross-platform ⚠ suspicious

1888

总下载

当前安装

版本数

在 OpenClaw 中安装

/install p-api

功能描述

Automate WhatsApp messaging, interactive content, instance and group management, catalogs, and webhooks via a scalable microservices API with an admin panel.

使用说明 (SKILL.md)

P-API - WhatsApp Connections Hub

The WhatsApp automation you've been waiting for.

Complete redesign with microservices architecture — modular, scalable, and independent.

🌐 Official Website: https://papi.api.br
🤝 Partner: Mundo Automatik

✨ Features

📊 Admin Panel (Free)

Multi-language interface (PT-BR, EN, ES)
Instance management
Real-time monitoring
Behavior configuration
Usage statistics

🔥 Pro Features

Feature	Capabilities
📞 Phone Calls	Chip-based calls, WhatsApp calls, Extension system, Call management
💬 RCS Messaging	Rich media sending, Buttons & carousels, Read receipts, Typing indicator
📱 Call Center	Chip rotation (30 ports), Bulk SMS sending, Configurable rate limiting
✉️ Professional SMS	Individual/bulk sending, Smart chip rotation, Port configuration
🔢 Virtual Numbers	Instant purchase, Auto activation, Full management

⚙️ Configuration

Before using, configure in TOOLS.md:

### P-API (WhatsApp)
- Base URL: https://your-server.com
- API Key: your-api-key
- Default Instance: instance-name

🔐 Authentication

All requests require the x-api-key header:

curl -X GET "https://your-server.com/api/instances" \
  -H "x-api-key: YOUR_KEY"

📡 Main Endpoints

Instances

Method	Endpoint	Description
GET	`/api/instances`	List all instances
POST	`/api/instances`	Create instance `{"id": "name"}`
GET	`/api/instances/:id/qr`	Get QR code
GET	`/api/instances/:id/status`	Instance status
DELETE	`/api/instances/:id`	Remove instance

Send Messages

JID format: [email protected]

Type	Endpoint	Required Fields
Text	`POST /send-text`	`jid`, `text`
Image	`POST /send-image`	`jid`, `url` or `base64`, `caption`
Video	`POST /send-video`	`jid`, `url` or `base64`
Audio	`POST /send-audio`	`jid`, `url`, `ptt`
Document	`POST /send-document`	`jid`, `url`, `filename`
Location	`POST /send-location`	`jid`, `latitude`, `longitude`
Contact	`POST /send-contact`	`jid`, `name`, `phone`
Sticker	`POST /send-sticker`	`jid`, `url`
Reaction	`POST /send-reaction`	`jid`, `messageId`, `emoji`

Interactive Messages

Type	Endpoint	Description
Buttons	`POST /send-buttons`	quick_reply, cta_url, cta_call, cta_copy
List	`POST /send-list`	Menu with sections
Carousel	`POST /send-carousel`	Sliding cards (mobile only)
Poll	`POST /send-poll`	Voting up to 12 options

Groups

Method	Endpoint	Description
POST	`/groups/create`	Create group
GET	`/groups/:groupId/metadata`	Group info
POST	`/groups/:groupId/participants`	Manage members (add/remove/promote/demote)

Webhook

POST /api/instances/:id/webhook
{
  "url": "https://your-server/webhook",
  "enabled": true,
  "events": ["messages", "status"]
}

📚 Detailed References

File	Content
`references/interactive.md`	Buttons, lists, carousel, polls examples
`references/groups.md`	Group management
`references/catalog.md`	Product catalog
`references/integrations.md`	Typebot, Chatwoot integrations

👥 Credits

Developed by: Pastorini
Website: https://papi.api.br
Partner: Mundo Automatik
Skill maintained by: @rafacpti23

安全使用建议

This skill appears to be documentation for a WhatsApp API (papi.api.br) and will instruct the agent to call external endpoints using an API key and base URL. Before installing, confirm who operates the endpoint (papi.api.br), and do not provide platform-wide secrets unless you trust the provider. Ask the publisher to: (1) update the manifest to declare required env vars (base URL and API key) so the platform can request them explicitly, (2) provide a privacy/security statement and contact, and (3) supply the missing TOOLS.md or clear instructions on where the agent should store credentials. If you plan to use webhooks, ensure your webhook endpoint validates incoming requests (signature or IP allowlist) and avoid exposing high-privilege credentials. If you cannot verify the provider or the missing manifest fields, treat installation as higher-risk and consider alternative well-known integrations.

功能分析

Type: OpenClaw Skill Name: p-api Version: 1.2.1 The skill bundle describes a WhatsApp automation API, detailing its features, configuration, authentication, and various endpoints for sending messages, managing instances, groups, product catalogs, and integrations (Typebot, Chatwoot, webhooks, WebSockets). All content, including the SKILL.md instructions, is purely descriptive and instructional for using the API, without any evidence of prompt injection attempts against the AI agent, data exfiltration, malicious execution, persistence, or obfuscation. The external domains (papi.api.br, mundoautomatik.com) are presented as official links for the service and its partner, not for malicious purposes.

能力评估

⚠ Purpose & Capability

The SKILL.md clearly describes a WhatsApp automation API (endpoints, x-api-key header, base URL, integrations). However the registry metadata lists no required environment variables or primary credential despite the instructions explicitly requiring an API key and base URL; that inconsistency is unexplained.

ℹ Instruction Scope

Instructions remain within the stated WhatsApp API scope (send messages, manage instances, webhooks, integrations). They direct network calls to an external service (papi.api.br or a user-provided base URL) and reference configuring TOOLS.md (which is not included). The instructions do not request unrelated local files or system state.

✓ Install Mechanism

No install spec and no code files — this is instruction-only documentation, so nothing will be written to disk at install time (lowest install risk).

⚠ Credentials

The skill's docs require an API key (x-api-key) and a base URL and reference other service tokens (e.g., Chatwoot token) for integrations, but the manifest declares no required env vars or primary credential. Requesting external service tokens would be proportionate for this functionality, but the omission in the manifest is a red flag (either an oversight or incomplete packaging).

✓ Persistence & Privilege

always is false and there is no install script. The skill does allow normal autonomous invocation (platform default), which is expected for an integration skill. It does not request persistent system privileges or modify other skills.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install p-api
安装完成后，直接呼叫该 Skill 的名称或使用 /p-api 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.2.1

Added summary field to frontmatter, improved table formatting

v1.2.0

Documentation in English, added table of contents/summary

v1.1.0

Adicionado logo oficial, apoio Mundo Automatik, descrição completa dos recursos (Painel Admin, Ligações, RCS, SMS, Números Virtuais)

v1.0.1

Removido scripts e arquivos sensíveis. Adicionado informações do site oficial papi.api.br

v1.0.0

- Primeira versão pública do skill pastorini-api. - Integração completa com Pastorini API (PAPI) para automação de WhatsApp. - Envio de mensagens de texto, mídia, documentos, localização, contatos, stickers e reações. - Suporte a mensagens interativas: botões, listas, carrossel e enquetes. - Gerenciamento de instâncias WhatsApp, grupos, catálogo de produtos e webhooks. - Instruções detalhadas de configuração e referência de endpoints incluídas.

元数据

Slug p-api

版本 1.2.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 5

常见问题