HTTP API
The legacy Wire2Air HTTP API (version 2.0) sends credentials as request parameters and answers in plain text. Hosts, credentials, request and response conventions.
Endpoints
| Endpoint | Method | URL | Credential |
|---|---|---|---|
| Send SMS | POST or GET | https://msgapi.wire2air.com/smsapi/submitsm.aspx | User ID, password, VASID |
| Send MMS | POST or GET | http://mms.wire2air.com/mms/submitmms.aspx | User ID, password, VASID |
| Credit balance | POST or GET | https://smsapi.wire2air.com/smsadmin/checksmscredits.aspx | User ID, password, VASID |
| Carrier lookup | GET | http://carrierlookup.wire2air.com/carrierlookup/default.aspx | App key |
| Keyword lookup | POST or GET | https://mzone.wire2air.com/mserver/servicemanager/api/checkkeywordapi.aspx | User ID, password, VASID |
| Keyword register | POST or GET | https://mzone.wire2air.com/mserver/servicemanager/api/RegisterKeywordAPI.aspx | User ID, password, VASID |
| Keyword credits | POST or GET | https://mzone.wire2air.com/mserver/api/subscribekeywords.aspx | User ID, password |
| Subscribe user | POST or GET | https://mzone.wire2air.com/mserver/api/SubscribeUser.aspx | App key |
| Send invitation | POST or GET | https://mzone.wire2air.com/mserver/api/sendinvitation.aspx | App key |
Incoming messages and delivery reports reach you through webhooks.
HTTPS
Six of these endpoints were documented with plain http:// URLs. These docs show https:// wherever the host accepts encrypted connections:
msgapi.wire2air.com,smsapi.wire2air.comandmzone.wire2air.comaccepthttps://. Themzoneandsmsapiendpoints were listed ashttp://before; their pages now showhttps://.mms.wire2air.com(send MMS) redirectshttps://requests tohttp://, so its URL stayshttp://.carrierlookup.wire2air.com(carrier lookup) presents a certificate for a different host name, sohttps://fails and its URL stayshttp://.
Requests
- Send parameters as
application/x-www-form-urlencodedin the body of aPOST. The endpoints also acceptGETwith the parameters in the query string, but that puts your password or app key in the URL, where servers and proxies log it; carrier lookup is the exception and isGETonly. - URL-encode every value (see URL encoding).
- Send one request per message or operation.
Parameter names are given as the documentation writes them, usually in capitals (USERID, VASID); the send SMS examples use lower case (userid, vasid).
Responses
Each endpoint answers with one line of plain text, for example:
JOBID: 12121234567:85582790
ERR: 301: Failed authentication
Read the HTTP status, then parse the text: a success starts with an endpoint-specific word (JOBID:, SERVICEID:, OK, ok, 000: or a number), and a failure with ERR: or Err:. The error table lists every documented code.
Credentials
The HTTP API uses your account user ID and password with a VASID, or an app key, depending on the endpoint. Find the VASID under Manage Account → API Information in the dashboard. See Authentication.

