Developer API
Buy numbers from your own software with API keys, developer prices and volume tiers, signed webhooks and an sms-activate compatible endpoint.
5 guides · 4 quick answers
Guides
-
Developer API quick start Buy numbers and read codes from your own software. Create a key, check prices, buy a number, wait for the SMS and finish, step by step.
-
API keys and security Scopes, IP allowlists, daily spend caps, expiry, rotation without downtime, and what to do if a key leaks.
-
Developer prices and volume tiers Developer prices are the wholesale price plus a markup that falls as your 30-day volume grows, never below 0.10 USD and never above the app price.
-
Webhooks Receive activation events on your server in real time, verify the SmsGrab-Signature header, and understand retries, test deliveries and automatic switch-off.
-
The sms-activate compatible endpoint Keep using bots and panels built for the sms-activate protocol by changing one URL. Supported actions, id formats and the differences to know.
Quick answers
How much does the developer API cost?
There is no subscription: you pay per number, from your normal balance. The developer price is the wholesale price plus a markup of 80 %, which falls to 70 % from 100 USD, 60 % from 500 USD and 50 % from 2,000 USD of developer spend in the last 30 days. It is never below 0.10 USD and never above the app price. Numbers without a code are refunded as usual. See Developer prices and volume tiers.
How many requests can I send to the API?
By default each key can send 600 requests and make 60 purchases per minute, and all keys of an account together 3,000 requests per minute. Up to 100 numbers can wait for a code at once per account, and up to 20 waiting requests (?wait=) can be open per key. Beyond a limit you get 429 RATE_LIMITED with a Retry-After header; every answer also carries RateLimit-* headers. See Developer API quick start.
My API key has leaked. What should I do?
Act at once: revoke the key in Account > Developers, or rotate it with a grace period of 0 hours. Revoking is immediate and needs no password. Then check the key's request log and your Wallet for activity you do not recognise, and create a new key with an IP allowlist and a daily spend cap. Keep keys only on servers, never in apps or web pages. See API keys and security.
Do tools built for sms-activate work with SmsGrab?
Yes, in most cases. Point the tool at https://smsgrab.com/api/stubs/handler_api.php and use your SmsGrab API key as api_key. The standard actions are supported, from getBalance and getNumber to setStatus and getStatus. Amounts are in US dollars at your developer price, not roubles, and rentals are not available. See The sms-activate compatible endpoint.
Other topics
Still need help?
Write to us. We answer every message, usually within a few hours.
Or email us at support@smsgrab.com