Biklo for developersTESTsandbox-api.biklo.comchange

List messages in a conversation

GET/v1/threads/{id}/messages

scope messages.read

Newest first. body is the text as STORED — when chat protection masked contact details, this is the masked version, which is what the buyer sees too.

Query parameters#

NameExample
limit50Max 100
cursor—next_cursor

Response#

FieldTypeDescription
countintegerHow many messages in this page.
next_cursorstring|nullPass back as ?cursor=; null on the last page.
dataarrayThe messages, oldest first.
data[].idintegerThe message id.
data[].fromstringWhich side wrote it.

Accepts buyer · seller

data[].authorobject|nullWho wrote it.
data[].author.idintegerTheir user id.
data[].author.namestringTheir display name.
data[].bodystring|nullThe text. Already MASKED where chat protection removed a phone number or email — you see what the buyer sees, not the original.
data[].has_attachmentbooleanWhether a file came with it. The file itself is not exposed over this API.
data[].typestringtext is an ordinary message. video and buy_request are messages our own features generate, and a buy_request is the buyer asking to unblock a stale listing — answer it in the dashboard, not here.

Accepts text · video · buy_request

data[].created_atstringISO-8601 UTC.

Example

{
    "count": 1,
    "next_cursor": null,
    "data": [
        {
            "id": 174420,
            "from": "buyer",
            "author": {
                "id": 9000002,
                "name": "Jane Doe"
            },
            "body": "Is this still available?",
            "has_attachment": false,
            "type": "text",
            "created_at": "2026-09-10T06:15:18Z"
        }
    ]
}

Failures use the shared error envelope — a machine-readable code and a request_id to quote to support. Error handling.

curl -X GET "https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50" \
  -H "Authorization: Bearer bk_test_YOUR_KEY"
<?php

$ch = curl_init('https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50');

curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST  => 'GET',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer bk_test_YOUR_KEY',
    ],
]);

$response = json_decode(curl_exec($ch), true);
curl_close($ch);

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "bk_test_YOUR_KEY");

var request = new HttpRequestMessage(
    new HttpMethod("GET"),
    "https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50");

var response = await client.SendAsync(request);
var json = await response.Content.ReadAsStringAsync();

import requests

response = requests.get(
    "https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50",
    headers={"Authorization": "Bearer bk_test_YOUR_KEY"},
)

data = response.json()

const response = await fetch("https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50", {
  method: "GET",
  headers: {
    Authorization: "Bearer bk_test_YOUR_KEY"
  }
});

const data = await response.json();

import java.net.http.*;
import java.net.URI;

var client = HttpClient.newHttpClient();

var request = HttpRequest.newBuilder()
    .uri(URI.create("https://sandbox-api.biklo.com/v1/threads/711/messages?limit=50"))
    .header("Authorization", "Bearer bk_test_YOUR_KEY")
    .method("GET", HttpRequest.BodyPublishers.noBody())
    .build();

var response = client.send(request, HttpResponse.BodyHandlers.ofString());