Legacy Cloud API

Authentication

Every External Cloud API request requires API credentials and a whitelisted caller IP.

Headers

Header	Description
`client-id`	Public client identifier from Developer Tools
`client-secret`	Secret key — never ship it in browser code

IP whitelist required Requests from IPs not listed under Developer Tools → IP Whitelist are rejected. Use GET /external-api/ping to discover the IP Washeej sees.

curl -H "client-id: YOUR_CLIENT_ID" \
     -H "client-secret: YOUR_CLIENT_SECRET" \
     https://staging-mobile.washeej.com/external-api/inbox/conversation-list

Response shape

Legacy responses use remark, status, message, and data. API v1 uses the ok / data / meta envelope — see v1 Response Format.