openapi: 3.2.0
info:
title: Infobip OpenAPI Specification Tools API
description: OpenAPI Specification that contains all public endpoints and webhooks.
contact:
name: Infobip support
email: support@infobip.com
version: 3.210.0
x-generatedAt: '2026-07-23T15:23:37.825639538Z'
tags:
- name: tools
description: 'Developer utilities to help you integrate and work with Infobip APIs more efficiently.
'
x-type: category
x-displayName: Tools
paths:
/platform/1/openapi:
get:
tags:
- tools
summary: Get OpenAPI Specification
description: Returns the complete OpenAPI Specification for the Infobip platform.
operationId: get-openapi
responses:
'200':
description: OpenAPI Specification
content:
application/json:
schema:
$ref: '#/components/schemas/d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.OpenAPI'
examples:
OpenAPI Specification:
summary: OpenAPI Specification
value:
openapi: 3.1.0
info:
title: Infobip OpenAPI Specification
description: OpenAPI Specification that contains all public endpoints and webhooks.
contact:
name: Infobip support
email: support@infobip.com
version: 2.1.0
'429':
$ref: '#/components/responses/ApiError429'
'500':
$ref: '#/components/responses/ApiError500'
x-throttling-info:
- type: time
numberOfRequests: 20
numberOfTimeUnits: 0
timeUnit: s
/platform/1/openapi/{product}:
get:
tags:
- tools
summary: Get OpenAPI Specification for a specific product
description: Returns the OpenAPI specification for a specific Infobip product, such as SMS, Email, or WhatsApp. To get the correct product identifier, [view the list of available products](https://www.infobip.com/docs/api/tools/openapi/get-available-products).
operationId: get-product-level-openapi
parameters:
- name: product
in: path
description: Product identifier.
required: true
style: simple
explode: false
schema:
type: string
responses:
'200':
description: OpenAPI Specification
content:
application/json:
schema:
$ref: '#/components/schemas/d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.OpenAPI'
examples:
OpenAPI Specification for a specific product:
summary: OpenAPI Specification for a specific product
value:
openapi: 3.1.0
info:
title: Infobip OpenAPI Specification
description: OpenAPI Specification that contains all public endpoints and webhooks.
contact:
name: Infobip support
email: support@infobip.com
version: 2.1.0
'404':
description: Not Found
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
examples:
OpenAPI Specification for a specific product not found:
summary: OpenAPI Specification for a specific product not found
value:
errorCode: OPENAPI404
description: The requested OpenAPI Specification does not exist.
action: Make sure that you provided the correct product identifier in the URL and check the provided resource for more information.
violations: []
resources: []
'429':
$ref: '#/components/responses/ApiError429'
'500':
$ref: '#/components/responses/ApiError500'
x-throttling-info:
- type: time
numberOfRequests: 20
numberOfTimeUnits: 0
timeUnit: s
/platform/1/openapi/available-products:
get:
tags:
- tools
summary: Get a list of available products
description: Returns a list of all available Infobip products that can be used to fetch the [OpenAPI Specification for a specific product](https://www.infobip.com/docs/api/tools/openapi/get-product-level-openapi). Use this list to find the correct value for the product path parameter.
operationId: get-available-products
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.AvailableProducts'
examples:
Available products:
summary: Available products
value:
products:
- id: sms
- id: whatsapp
'429':
$ref: '#/components/responses/ApiError429'
'500':
$ref: '#/components/responses/ApiError500'
x-throttling-info:
- type: time
numberOfRequests: 20
numberOfTimeUnits: 0
timeUnit: s
components:
schemas:
d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.AvailableProducts:
type: object
description: Available products.
properties:
products:
type: array
description: List of available products.
items:
$ref: '#/components/schemas/d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.AvailableProduct'
title: AvailableProducts
d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.AvailableProduct:
type: object
description: List of available products.
properties:
id:
type: string
description: Product identifier.
title: AvailableProduct
ApiError:
type: object
properties:
errorCode:
type: string
description: An error code uniquely identifying the error case.
description:
type: string
description: A detailed description of an error.
action:
type: string
description: An action that should be taken to recover from the error.
violations:
type: array
description: List of violations that caused the error.
items:
$ref: '#/components/schemas/ApiErrorViolation'
resources:
type: array
description: List of available resources to recover from the error.
items:
$ref: '#/components/schemas/ApiErrorResource'
required:
- action
- description
- errorCode
- resources
- violations
title: ApiError
ApiErrorViolation:
type: object
description: List of violations that caused the error.
properties:
property:
type: string
description: Request property that caused the error.
violation:
type: string
description: Detailed violation description.
title: ApiErrorViolation
d2eeca5070e19d116b5e48cb8dbc21132490d09f32a707af8c36324fa50d906d.OpenAPI:
type: object
additionalProperties:
type: object
description: OpenAPI schema.
description: Infobip OpenAPI Specification
title: OpenAPI
ApiErrorResource:
type: object
description: List of available resources to recover from the error.
properties:
name:
type: string
description: Resource name.
url:
type: string
description: Resource URL.
title: ApiErrorResource
responses:
ApiError429:
description: Too Many Requests
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
example:
errorCode: E429
description: Too many requests sent.
action: Check request rate limit specified in the API endpoint documentation resource.
violations: []
resources:
- name: Throttling handling errors
url: https://www.infobip.com/docs/essentials/integration-best-practices#throttling-handling-errors
application/xml:
schema:
$ref: '#/components/schemas/ApiError'
example: "\n E429\n Too many requests sent.\n Check request rate limit specified in the API endpoint documentation resource.\n \n \n \n Throttling handling errors\n https://www.infobip.com/docs/essentials/integration-best-practices#throttling-handling-errors\n \n \n\n"
ApiError500:
description: Internal Server Error
content:
application/json:
schema:
$ref: '#/components/schemas/ApiError'
example:
errorCode: E500
description: Something went wrong.
action: Contact the support.
violations: []
resources: []
application/xml:
schema:
$ref: '#/components/schemas/ApiError'
example: "\n E500\n Something went wrong.\n Contact the support.\n \n \n\n"
securitySchemes:
APIKeyHeader:
type: apiKey
description: 'This is the most secure authorization type and the one with the most flexibility.
API keys can be generated by calling the dedicated API method. Furthermore, API keys can have a limited scope and cover only some API methods. Lastly, they can
be revoked at any time. This range of possibilities makes API keys well suited for separating the API access rights across multiple applications or use cases.
Finally, the loss of an API key is easily manageable.
You can manage your API keys from [GUI](https://portal.infobip.com/settings/accounts/api-keys), or programmatically
with [dedicated API](#platform-&-connectivity/settings).
API key Authorization header example:
```shell
Authorization: App 003026bbc133714df1834b8638bb496e-8f4b3d9a-e931-478d-a994-28a725159ab9
```
'
name: Authorization
in: header
Basic:
type: http
description: 'Basic authorization type can be used in situations when the API key is not available. For example, API methods for generating API keys should be authenticated
with the Basic type.
In this case, the credentials included in the Authorization header should be a Base64 encoded username and password combination. More formally, basic
authentication header can be constructed in three steps:
* Username and password are concatenated using the colon `(:)` as a separator `username:password`.
* The resulting string is encoded using the [RFC2045-MIME](https://www.ietf.org/rfc/rfc2045.txt) variant of Base64.
* Encoded string is added as credentials after the `"Basic "` type.
Example:
```shell
Username: "Aladdin"
Password: "openSesame"
Concatenated string: "Aladdin:openSesame"
Base64 encoded string: "QWxhZGRpbjpvcGVuU2VzYW1l"
Authorization header: "Basic QWxhZGRpbjpvcGVuU2VzYW1l"
```
> **Implementation detail**: Base64 encoding is a standard and many available programming languages and frameworks provide convenient methods for encoding
> strings.
'
scheme: basic
IBSSOTokenHeader:
type: apiKey
description: 'This authorization type is suited for situations when you do not want to store Infobip credentials in your own app. Instead, your users will input their Infobip
credentials every time they access your application and the application will use those credentials to create a session. From then on, the session token can be
used to authenticate subsequent API requests. Note that the session will expire automatically after a predefined period of inactivity, and can also be manually
terminated by making an appropriate API call.
You can find more details on the creation and behavior of the session at
the [dedicated documentation page](#platform-connectivity/account-management/create-session).
After obtaining the session token by calling the above-referenced API method you can include it in the Authorization header like this:
```shell
Authorization: IBSSO 2f9b4d31-2d0d-49a8-85f0-9b862bdca394
```
'
name: Authorization
in: header
OAuth2:
type: oauth2
description: 'Similarly to the IBSSO Token authentication you can use OAuth 2.0 bearer token with Infobip serving both as resource and authorization server. You can obtain
the access token using the client credentials grant from `auth/1/oauth2/token` endpoint. It will provide you with your access token, and its expiration period.
You can use the token to authorize your API calls until it expires. You can find out more about the process in
the [official specification](https://tools.ietf.org/html/rfc6749#section-4.4).
You can include your access token in the Authorization HTTP request header like this:
```http
Authorization: Bearer
```'
flows:
clientCredentials:
tokenUrl: https://api.infobip.com/auth/1/oauth2/token
scopes: {}