# BlastWave SMS Platform — LLM & Developer Index (v1)

> Enterprise multi-tenant SMS/MMS marketing, 10DLC & Toll-Free compliance, two-way conversational inbox, keyword/drip automations, autonomous 24/7 Conversational AI Agents, UniRoma+ AI copywriting, and real-time HMAC-SHA256 webhook platform powered by Bandwidth V2 & TCR.
> Base API URL: `https://sms.reliadata.io/api/v1`
> Real-Time WebSocket URL: `wss://sms.reliadata.io/ws?token=<jwt_access_token>`

## Canonical Machine-Readable Specifications
- [Complete LLM Developer Guide & Full API Reference](https://sms.reliadata.io/llms-full.txt): Single-file, zero-hallucination specification covering every customer workflow from searching & buying phone numbers to 10DLC/TFV registration, contacts/lists, templates, 1:1 & bulk SMS/MMS, broadcast & CSV-merge campaigns, two-way inbox, keyword/drip automations, Conversational AI Agents, UniRoma+ AI, billing, and HMAC-SHA256 webhooks (with Python, Node.js/TypeScript, and PHP SDK code).
- [Markdown API Reference (`/api-docs.md`)](https://sms.reliadata.io/api-docs.md): Direct Markdown mirror of the complete LLM Developer Guide.
- [Public SSR HTML Developer & LLM Docs Portal (`/api-docs`)](https://sms.reliadata.io/api-docs): Zero-JS server-side rendered HTML5 developer portal containing the full API specification.
- [Live OpenAPI 3.1 JSON Schema (`/openapi.json` & `/api/v1/docs/openapi.json`)](https://sms.reliadata.io/api/v1/docs/openapi.json): Complete machine-readable OpenAPI 3.1 specification for all customer routes and Pydantic models.
- [Interactive Swagger UI (`/docs`)](https://sms.reliadata.io/docs) & [ReDoc (`/redoc`)](https://sms.reliadata.io/redoc): Interactive browser API documentation.

## Authentication Quick Reference
- **Server-to-Server API Key (Recommended)**:
  Pass header `X-API-Key: bw_live_<64_hex_chars>` (or `Authorization: Bearer bw_live_<64_hex_chars>`).
- **JWT Bearer Token**:
  Obtain via `POST /api/v1/auth/login` (`{"email": "...", "password": "..."}`) and pass `Authorization: Bearer <access_token>`.

## Complete Customer Feature Map (`/api/v1`)
1. **Onboarding, Auth, MFA & Team Management**:
   - `POST /api/v1/auth/register`, `POST /api/v1/auth/login`, `POST /api/v1/auth/mfa/validate`, `POST /api/v1/auth/refresh`, `GET /api/v1/auth/me`
   - `GET/PUT /api/v1/tenants/current`, `GET /api/v1/tenants/current/usage`, `POST /api/v1/tenants/current/invites`, `GET/PUT/DELETE /api/v1/tenants/current/users*`
2. **Scoped API Keys (`bw_live_...`)**:
   - `POST /api/v1/api-keys`, `GET /api/v1/api-keys`, `PUT /api/v1/api-keys/{key_id}`, `DELETE /api/v1/api-keys/{key_id}`, `GET /api/v1/api-keys/{key_id}/usage`
   - Scopes: `*`, `messages:send`, `messages:read`, `contacts:read`, `contacts:write`, `campaigns:read`, `campaigns:write`, `numbers:read`, `analytics:read`, `webhooks:manage`
3. **Billing, Wallet Credits & Auto-Recharge**:
   - `GET /api/v1/billing`, `GET /api/v1/billing/plans`, `POST /api/v1/billing/credits/purchase`, `POST /api/v1/billing/checkout`, `POST /api/v1/billing/portal`, `GET/PUT /api/v1/billing/auto-recharge`, `GET /api/v1/billing/invoices`, `GET /api/v1/billing/events`, `GET /api/v1/billing/events/export`
4. **Getting New Phone Numbers (Search, Order, Configure, Link 10DLC & Release)**:
   - Search available numbers: `POST /api/v1/numbers/search` (`{"area_code": "307", "state": "WY", "number_type": "local"|"toll_free", "quantity": 10}`)
   - Purchase & provision numbers: `POST /api/v1/numbers/order` (`{"numbers": ["+13075550140"], "campaign_id": "<optional_10dlc_campaign_uuid>"}`)
   - Manage inventory: `GET /api/v1/numbers`, `PUT /api/v1/numbers/{number_id}`, `GET /api/v1/numbers/{number_id}/stats`, `POST /api/v1/numbers/sync`, `DELETE /api/v1/numbers/{number_id}`
5. **10DLC Brands, Campaigns, Compliance Mini-Sites, Toll-Free Verification (TFV), Opt-Outs & Quiet Hours**:
   - 10DLC Brands: `POST /api/v1/compliance/brands/ai-research`, `POST /api/v1/compliance/brands/apply`, `GET /api/v1/compliance/brands`, `POST /api/v1/compliance/brands/{brand_id}/vet`
   - Compliance Mini-Sites: `POST /api/v1/compliance/minisites`, `GET /api/v1/compliance/minisites`, `PUT/DELETE /api/v1/compliance/minisites/{id}`
   - 10DLC Campaigns: `POST /api/v1/compliance/campaigns/ai-generate`, `POST /api/v1/compliance/campaigns/preflight-check`, `POST /api/v1/compliance/campaigns/apply`, `GET /api/v1/compliance/campaigns`, `POST /api/v1/compliance/campaigns/{id}/auto-heal`, `POST /api/v1/compliance/campaigns/{id}/revet`
   - Toll-Free Verification: `GET /api/v1/compliance/toll-free`, `POST /api/v1/compliance/toll-free/verify`
   - Opt-Outs, TCPA & Quiet Hours: `GET/POST/DELETE /api/v1/compliance/opt-outs`, `GET/POST /api/v1/compliance/tcpa-consent`, `GET/PUT /api/v1/compliance/quiet-hours`
6. **Contacts, Custom Fields, Tags, Smart Lists & Spreadsheet Imports**:
   - `GET/POST /api/v1/contacts`, `GET/PUT/DELETE /api/v1/contacts/{id}`, `POST /api/v1/contacts/bulk`, `POST /api/v1/contacts/parse-file`, `POST /api/v1/contacts/import`, `GET /api/v1/contacts/merge-fields`, `GET /api/v1/contacts/export`
   - `GET/POST /api/v1/lists`, `POST /api/v1/lists/smart-preview`, `GET/PUT/DELETE /api/v1/lists/{id}`, `GET/POST/DELETE /api/v1/lists/{id}/contacts`
7. **Message Templates, Merge Tags, Filters & Spintax**:
   - `GET/POST /api/v1/templates`, `GET/PUT/DELETE /api/v1/templates/{id}`, `POST /api/v1/templates/{id}/preview`, `POST /api/v1/templates/inspect`
8. **Sending 1:1 & Bulk SMS/MMS, Media Uploads & Tracked Short Links**:
   - `POST /api/v1/messages/send`, `POST /api/v1/messages/send-bulk`, `GET /api/v1/messages`, `GET /api/v1/messages/{id}`, `GET /api/v1/messages/{id}/status`
   - `POST /api/v1/media/upload`, `POST /api/v1/ai/shorten-link`
9. **Broadcast, A/B Test, Number-Pool & Personalized CSV-Merge Campaigns**:
   - `POST /api/v1/campaigns/upload-merge-file`, `GET/POST /api/v1/campaigns`, `GET/PUT/DELETE /api/v1/campaigns/{id}`, `POST /api/v1/campaigns/{id}/launch`, `/pause`, `/resume`, `/cancel`, `/clone`, `/retry-failed`, `GET /api/v1/campaigns/{id}/stats`, `/messages`, `/export`
10. **Two-Way Inbox & Real-Time WebSockets**:
    - `GET /api/v1/inbox`, `GET/PUT /api/v1/inbox/{id}`, `GET /api/v1/inbox/{id}/messages`, `POST /api/v1/inbox/{id}/reply`, `/note`, `/assign`, `/close`, `wss://sms.reliadata.io/ws`
11. **Automations (Keyword Auto-Replies & Multi-Step Drip Sequences)**:
    - `GET/POST/PUT/DELETE /api/v1/automations/auto-replies*`
    - `GET/POST/PUT/DELETE /api/v1/automations/drip-sequences*`, `POST /api/v1/automations/drip-sequences/{id}/activate`, `POST /api/v1/automations/drip-sequences/{id}/enroll`, `GET /api/v1/automations/drip-sequences/{id}/enrollments`
12. **Conversational AI Agents & UniRoma+ AI Copywriting**:
    - `GET/POST /api/v1/ai-agents`, `GET/PUT/DELETE /api/v1/ai-agents/{id}`, `POST /api/v1/ai-agents/{id}/test`, `GET /api/v1/ai-agents/{id}/logs`
    - `GET /api/v1/ai/status`, `POST /api/v1/ai/rewrite`, `POST /api/v1/ai/generate-variants`, `POST /api/v1/ai/customize-preview`, `POST /api/v1/ai/inbox-suggest`
13. **Outbound Customer Webhooks (8 Events + HMAC-SHA256) & Analytics**:
    - `GET/POST/PUT/DELETE /api/v1/webhooks/endpoints*` (and `/api/v1/tenants/current/webhooks*`), `GET /api/v1/webhooks/secret`, `POST /api/v1/webhooks/rotate-secret`, `POST /api/v1/webhooks/test`, `GET /api/v1/webhooks/deliveries`
    - Events: `message.sent`, `message.delivered`, `message.failed`, `message.received`, `contact.opted_out`, `contact.opted_in`, `campaign.completed`, `ai.escalation`
    - Analytics: `GET /api/v1/analytics/dashboard`, `/volume`, `/campaigns`, `/numbers`, `/contacts`, `/carrier-errors`, `/export`