Zalo is the dominant messaging app in Vietnam, and your Official Account is how customers reach you there. Connect one through OAuth and read and reply to conversations with the same direct message API you use for Instagram, WhatsApp, and Telegram. Inbound messages arrive in real time via webhooks.
Reply to a Zalo conversation
1curl -X POST https://api.social-api.ai/v1/inbox/conversations/<conversation-id>/messages \
2 -H "Authorization: Bearer <your-api-key>" \
3 -H "Content-Type: application/json" \
4 -d '{
5 "account_id": "<zalo-account-id>",
6 "text": "Cam on ban! Your order shipped today."
7 }' | jq
8
9# Response (HTTP 201)
10{
11 "id": "eb1f2c9a4d...",
12 "platform": "zalo",
13 "conversation_id": "<conversation-id>",
14 "text": "Cam on ban! Your order shipped today.",
15 "created_at": "2026-08-23T10:24:00Z"
16}
Inbound messages stream into the unified inbox via webhooks; replying is one POST. The same endpoint and the same payload shape you already use for Instagram, WhatsApp, and Telegram deliver a Zalo Official Account reply.
Receive customer messages in real time and reply through the same unified inbox endpoint used for every other platform.
Create, update, and delete Zalo Official Account articles and video posts through the unified publishing API.
Inbound messages and events arrive as real-time webhook events, signature-verified on arrival.
the official Zalo Official Account Open API
Register a Zalo app, wire the PKCE authorization flow by hand, and domain-verify your callback before the first token exchange succeeds.
With SocialAPI.ai
Click connect in the dashboard. PKCE, the callback, and the domain-verified redirect are handled on our side.
the official Zalo Official Account Open API
Access tokens last about 25 hours and the refresh token is single-use, so it rotates on every refresh. Lose the rotation and the account is disconnected.
With SocialAPI.ai
Tokens refresh ahead of expiry and the rotated pair is stored for you. You never handle a Zalo token.
the official Zalo Official Account Open API
Article creation is asynchronous. You submit a token, then poll a verify endpoint that keeps returning a processing code until the article lands.
With SocialAPI.ai
One call to the publishing API. The polling happens inside the connector and you get the finished post back.
the official Zalo Official Account Open API
A Vietnam-only integration you maintain separately from every other messaging API.
With SocialAPI.ai
The same /v1/inbox endpoints cover Zalo plus ten other platforms, with one schema for conversations and messages.
There are no comments, reviews, or mentions on Zalo. Zalo exposes no public API for them, so those parts of the unified API do not apply to this platform.
Sending a message requires the customer to have interacted with your Official Account within the last 7 days. Outside that window Zalo rejects the send and the API returns a 422.
Article creation is asynchronous. Zalo returns a processing code until the article is published, so publishing completes after a short poll rather than instantly.
One Official Account per connection. A Zalo token grants access to a single OA, so connect each Official Account separately.
When you connect an Official Account, SocialAPI.ai registers the Zalo webhook and verifies the signature on every event before it is accepted. Customer messages are ingested as they arrive and surfaced in the unified inbox with the same conversation and message schema used across all platforms, so one direct message API covers Zalo alongside Instagram, WhatsApp, and Telegram.
Reply with text, an image or file attachment, a quoted reply to a specific message, or call-to-action buttons. SocialAPI.ai maps each reply to the right Zalo consultation message payload for you, through the same send-message endpoint you already use on every other messaging platform.
Create, update, and delete Official Account articles and video posts with the same publishing endpoints that drive Instagram, LinkedIn, and Facebook. Zalo publishes articles asynchronously, so the connector polls Zalo until the article is live and returns the finished post rather than a pending token you have to chase yourself.
Zalo uses PKCE authorization with a short-lived access token and a single-use refresh token that rotates on every refresh. SocialAPI.ai runs the PKCE exchange, refreshes ahead of expiry, and persists the rotated pair, so a connected account stays connected without any token code in your application.
Reading comments, DMs, and mentions is free and unlimited on every plan. Paid plans start at $29/mo with unlimited posts and interactions. The free tier needs no credit card.
FAQ
No. Zalo does not expose a public API for comments, reviews, or mentions, so SocialAPI.ai cannot offer them on Zalo. You get direct messages and post publishing. Every other capability in the unified API works on the platforms that do support it.
Zalo requires the redirect domain to be both registered as your app's callback URL and domain-verified in the Zalo portal (via DNS TXT record, HTML file, or meta tag). Setting the callback URL alone is not enough. Verify the domain and the connection will complete.
Yes. Zalo Official Account is the business side of Zalo, Vietnam's dominant messaging app, and its Open API covers messaging and article publishing. Using it raw means running PKCE authorization, domain verification, rotating single-use refresh tokens, and asynchronous article polling yourself. SocialAPI.ai wraps that behind one REST API: connect an Official Account and read and reply to messages from the same unified inbox as every other platform.
A Zalo Official Account (OA) is the business profile a company runs on Zalo, the messaging app used by most of Vietnam. Customers message the OA the way they would message a WhatsApp Business number, and the OA can also publish articles and video posts. The Zalo Open API acts on behalf of one Official Account per connected token.
Zalo lets you send a consultation message only if the customer has interacted with your Official Account within the last 7 days, and replies within the first 48 hours are free. If the window has closed, Zalo rejects the send and SocialAPI.ai returns a 422 with the reason, so you can surface it in your own UI instead of guessing.
Zalo does not charge for consultation replies inside the free window, and SocialAPI.ai starts at $0: the Free plan includes 2 social profiles and 50 interactions per month, and paid plans have unlimited interactions. You keep ownership of your Official Account and your Zalo app.
Get started today
Free tier available · No credit card required · Ships with MCP server
We use essential cookies for security, and analytics cookies with your consent. Privacy Policy.