REST API & Webhooks

Developer-First Link Infrastructure API & Webhooks

Create links, retrieve QR codes, and send custom events from a trusted server. Configure signed webhooks in your workspace.

AI Overview & Core Takeaway

The external API-key surface supports link creation and retrieval, QR export, and custom event submission. Analytics reads and webhook configuration use Bearer-authenticated workspace routes.

SWIFT
import Foundation
import WilderlinksSDK

let client = WilderlinksClient(config: WilderlinksConfig(
  baseURL: URL(string: "https://api.wilderlinks.space")!,
  domains: ["go.yourbrand.com"]
))
let result = await client.handleIncomingURL(url)
if result.matched { print(result.deepLinkPayload as Any) }

Built for Mobile Routing

Explore the configured routing, app integration, and measurement capabilities.

Scoped API Keys

Provision organization keys with links:read, links:write, qr:read, or events:write scopes. Keep the key on a trusted server.

Scoped Access

Signed Webhooks

Subscribe to click, link.created, link.matched, link.opened, or custom.event. Delivery and retry timing are not guaranteed.

HMAC-SHA256 Signatures

OpenAPI Documentation

Clean Postman collection and OpenAPI schemas for instant developer integration.

OpenAPI Compliant

Full Feature Breakdown

Deep technical capabilities built into every WilderLinks deployment.

REST Endpoint

Programmatic Link Management

Generate dynamic links via simple POST requests with JSON payload parameters.

  • API-key create/get/QR/event operations
  • Authorization: ApiKey <server-held-key>
  • Separate Bearer-authenticated workspace management routes
CURL
curl -X POST https://api.wilderlinks.space/api/v1/links \
  -H "Authorization: ApiKey <server-held-key>" \
  -H "Content-Type: application/json" \
  -d '{
    "defaultUrl": "https://example.com/item/42",
    "slug": "flash-deal"
  }'
Routing

Configured rules

Depends on your link and destination setup

Install matching

Token-based

Platform-dependent recovery

Read-only inspection

Tester

No destination fetch or click event

Supported Platforms
iOS
Android
Web
Swift Kotlin RN Flutter

Frequently Asked Questions

Everything you need to know about REST API & Webhooks.

How do I authenticate API calls?

External operations use Authorization: ApiKey <server-held-key>. Bearer JWTs are for a signed-in workspace user, not an API-key substitute.

What rate limits apply to the REST API?

The service applies a general API rate limiter and plan-specific request quotas. Check current workspace entitlements; do not assume an enterprise burst guarantee.

Which webhook events can I subscribe to?

The implemented events are click, link.created, link.matched, link.opened, and custom.event. There is no separate install or lead-capture webhook type.

Are webhook payloads signed with an HMAC signature for security?

Yes. Deliveries include X-Webhook-Event and X-Webhook-Signature: sha256=<HMAC-SHA256 of the raw JSON body>. The signing secret is shown once when the webhook is created.

Is there an OpenAPI or Postman collection available?

Yes. The API publishes /openapi.json, and the public /docs page links to the existing Postman collection.

Ready to deliver links that think?

Start with the integration guide, then configure your domain and app.