Base URL:
Use deployment X-API-Key for admin access, or per-instance wsp_v3_* keys for scoped calls. Open workers skip auth when no API_KEY is configured.
Inbound webhooks include media_id and media.downloadUrl when someone sends image, video, audio, or a document. Fetch the file with GET {workerHost}{media.downloadUrl}. List all stored media with GET /api/instances/INSTANCE_ID/media.