What is it?
It’s the set of protections that make every send unique, traceable, and secure. You integrate once; the platform handles what happens after the API accepts the request. Think of a building with a front desk: your code drops off the package at reception; Notifique manages the queue, avoids delivering twice, and records what happened.What does Notifique protect against?
Avoid duplicate sends
Connection blipped, timeout fired, and your system retried? In naive integrations, the customer gets charged twice. On Notifique, send a unique identifier in theIdempotency-Key header (we also accept X-Idempotency-Key):
- Generate one key per operation (e.g. order ID, payload hash)
- Send it in the header on every critical POST
- If you repeat the same key within 24 h, the API does not create another message
- The response returned is from the first accepted request
Retry as much as you need. The recipient receives once.
Nothing gets lost in transit
Server restarts, WhatsApp wobbles, queue briefly unavailable. On fragile systems, the message disappears. Here, each step has a safety net:
Like the post office line: one package at a time, in order, with a record if something goes wrong.
For final outcomes, combine webhooks (delivery status) with API logs (whether the HTTP request was accepted).
Your data and customer data
Recipient reports (Brazilian Law 14.230/2021): Report API (FELCA).
What to do on your side
- Never commit API Keys. Use
.envor a secrets vault - Use
Idempotency-Keyon critical sends (billing, OTP, confirmation) - Respond 2xx quickly on webhooks and process in the background
- Validate HMAC signature on every webhook. See Webhooks
- Watch 402 and 403. Often limits or scopes, not code bugs
- Test in Sandbox before going to production
Next steps
- API Keys: scopes, rotation, and per-key limits
- Webhooks: set up URL and validate signature
- Error responses: HTTP codes and
code - Trust Factor: reputation and send limits
- Sandbox: integrate without production risk

