httpsms README

The project's README from github.com/NdoleStudio/httpsms. As one markdown file: README.md.

httpSMS

Web API GitHub contributors GitHub license Contributor Covenant Scrutinizer Code Quality Better Stack Badge Greptile: The War on Bugs Sponsors Discord

httpSMS is a service that lets you use your Android phone as an SMS Gateway to send and receive SMS messages. You make a request to a simple HTTP API and it triggers your Android phone to send an SMS. SMS messages received on your android phone can also be forwarded to your webhook endpoint.

Quick Start Guide 👉 https://docs.httpsms.com

header

Table Of Contents

Why?

I'm originally from Cameroon and I wanted an automated way to send and receive SMS messages using an API. Unfortunately many countries don't support the ability to buy virtual phone numbers, and I could not find a good ready-made solution that could help me send/receive SMS messages using a mobile phone using an intuitive http API.

Web UI

The web interface https://httpsms.com is built using Nuxt and Vuetify. It is hosted as a single page application on firebase. The source code is in the web directory

API

The API https://api.httpsms.com is built using Fiber, Go and CockroachDB for the database. It runs as a serverless application on Google Cloud Run. The API documentation can be found here https://api.httpsms.com/index.html

// Sending an SMS Message using Go
client := htpsms.New(htpsms.WithAPIKey(/* API Key from https://httpsms.com/settings */))

client.Messages.Send(context.Background(), &httpsms.MessageSendParams{
    Content: "This is a sample text message",
    From:    "+18005550199",
    To:      "+18005550100",
})

Android App

The Android App is a native application built using Kotlin with material design principles. This app must be installed on an Android phone before you can start sending and receiving SMS messages.

Get it on GitHub

Chat/forum

There are a few ways to get in touch with me and/or the rest of the community. Feel free to use any of these methods. Whatever works best for you:

Features

End-to-end Encryption

You can encrypt your messages end-to-end using the military grade AES-256 encryption algorithm. Your encryption key is stored only on our mobile phone so the even the server won't have any way to view the content of your SMS messages which are sent and received on your Android phone.

Webhook

If you want to build advanced integrations, we support webhooks. The httpSMS platform can forward SMS messages received on the android phone to your server using a callback URL which you provide.

Back Pressure

In-order not to abuse the SMS API on android, you can set a rate limit e.g 3 messages per minute. Such that even if you call the API to send messages to 100 people, It will only send the messages at a rate of 3 messages per minute.

Message Expiration

Sometimes it happens that the phone doesn't get the push notification in time and I can't send the SMS message. It is possible to set a timeout for which a message is valid and if a message becomes expired after the timeout elapses, you will be notified.

API Clients

Flows

Sending an SMS Message

sequenceDiagram
User->>+httpSMS API: Call /v1/messages/send API
httpSMS API-->>+Push Queue: Schedule notification about new message
httpSMS API-->>-User: Respond with 202 (Accepted)
Push Queue-->>+httpSMS API: [Async] Send notification request
httpSMS API-->>-Android App: Send push notification about new message
Android App-->>httpSMS API: [Async] Fetch message
Android App-->>Android App: Send Message using Android SMS API
Android App-->>httpSMS API: [Async] Send result of sending SMS
Android App-->>httpSMS API: [Async] Send Delivery Report

Self Host Setup - Docker

1. Setup Firebase

const firebaseConfig = {
  apiKey: "AIzaSyAKqPvj51igvvNNcRtxxxxx",
  authDomain: "httpsms-docker.firebaseapp.com",
  projectId: "httpsms-docker",
  storageBucket: "httpsms-docker.appspot.com",
  messagingSenderId: "668063041624",
  appId: "1:668063041624:web:29b9e3b702796xxxx",
  measurementId: "G-18VRYL2xxxx",
};

2. Setup SMTP Email service

The httpSMS application uses SMTP to send emails to users e.g. when your Android phone has been offline for a long period of time. You can use a service like mailtrap to create an SMTP server for development purposes.

3. Setup Cloudflare Turnstile

The message search route (/v1/messages/search) is protected by a Cloudflare Turnstile captcha to prevent abuse. You need to set up a Turnstile widget for the search messages feature to work.

  1. Go to the Cloudflare dashboard and navigate to Turnstile.
  2. Add a new site and configure it for your self-hosted domain (e.g., localhost for local development).
  3. Note down the Site Key and Secret Key — you will need them for the frontend and backend environment variables respectively.

4. Download the code

Clone the httpSMS GitHub repository

git clone https://github.com/NdoleStudio/httpsms.git

5. Setup the environment variables

cp web/.env.docker web/.env
FIREBASE_API_KEY=
FIREBASE_AUTH_DOMAIN=
FIREBASE_PROJECT_ID=
FIREBASE_STORAGE_BUCKET=
FIREBASE_MESSAGING_SENDER_ID=
FIREBASE_APP_ID=
FIREBASE_MEASUREMENT_ID=

# Cloudflare Turnstile site key from step 3
CLOUDFLARE_TURNSTILE_SITE_KEY=
cp api/.env.docker api/.env
# SMTP email server settings
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_HOST=
SMTP_PORT=

# Firebase service account credentials
FIREBASE_CREDENTIALS=

# This is the `projectId` from your firebase web config
GCP_PROJECT_ID=

# Cloudflare Turnstile secret key from step 3
CLOUDFLARE_TURNSTILE_SECRET_KEY=

6. Build and Run

docker compose up --build

7. Create the System User

[!IMPORTANT] Restart your API docker container after modifying EVENTS_QUEUE_USER_ID, and EVENTS_QUEUE_USER_API_KEY in your .env file so that the httpSMS API can pick up the changes.

8. Build the Android App.

Integration Testing

The project includes end-to-end integration tests that validate the complete SMS send/receive lifecycle. Tests run the full stack (API, PostgreSQL, Redis) in Docker alongside a phone emulator that simulates an Android device.

📖 Full documentation: tests/README.md

Quick run:

cd tests
bash generate-firebase-credentials.sh
export FIREBASE_CREDENTIALS=$(jq -c . firebase-credentials.json)
docker compose up -d --build --wait
docker compose wait seed && sleep 2
go test -v -timeout 120s ./...
docker compose down -v

Integration tests also run automatically in CI on every push/PR to main.

License

This project is licensed under the GNU AFFERO GENERAL PUBLIC LICENSE Version 3 - see the LICENSE file for details

httpsms (NdoleStudio/httpsms)

sms-api
Searching Database…

What is this?httpSMS turns an Android phone into an SMS gateway: you call a simple HTTP API and it triggers the phone to send a text, and incoming SMS on the phone can be forwarded to your webhook.
Is this a hosted service or something I self-host?It is a self-hostable stack (Go API, web UI, Postgres, Redis) that you run with Docker Compose, plus an Android app that actually sends the SMS.
How do I get the self-hosted version running?Clone the repo, set up Firebase (for push notifications to the phone), an SMTP service, and Cloudflare Turnstile, fill in the .env files for the web and api directories, then run docker-compose.yml, create a system user in the database, and finally build the Android app in Android Studio with your google-services.json.
What external services do I need before I can self-host it?You need a Firebase project (for Cloud Messaging push notifications and auth), an SMTP server for transactional emails, and a Cloudflare Turnstile site for captcha protection on the search endpoint.
Does the phone always send messages right away?No — delivery depends on the phone receiving the push notification in time, so the README recommends setting a message expiration timeout so you get notified if it fails rather than waiting forever.
Does the server ever see the content of my messages?If you enable end-to-end encryption, messages are encrypted with AES-256 and the key stays only on your phone, so the server can't read the SMS content.
Can I control how fast SMS messages get sent?Yes, you can set a rate limit such as 3 messages per minute (back pressure), so even bulk API calls to 100 recipients get throttled to that rate.
Are there client libraries for calling the API?Yes, official API clients are listed for Go and JavaScript/TypeScript.
Where does the received SMS data go?Incoming SMS messages on the Android phone can be forwarded to a webhook/callback URL you configure on your own server.
Can I test the whole send/receive flow before deploying?Yes, the project ships end-to-end integration tests that run the full API, PostgreSQL, and Redis stack in Docker alongside a phone emulator, and these also run automatically in CI.
Size
42.9 MB
Stars
6K
Age
4y
Commits · 90 Days