Those API calls are are all over internet but nobody seem to address how to get those valid phone_id.
I never looked too much into because the whole concept of acting like the official Wyze application with username/password to access a public API is just idiotic.
I just assume that to be able to use those calls you need to have a phone GUID “authorized” in wyze database. No idea why they would use the phone UUID instead of just generating one for each client (that would slightly make for a bit better security)
Which Phone ID are you using? Where did you get it?
How would you create a “steps leaderboard”? A mobile app that collect the data and send to your server? a PC client? A web app?
Good points. Yes Wyze really should provide a public API that offers some user data such as steps via a simplified auth process. That said, I have found some evidence in the responses that there either are existing APIs or planned ones for freer access to non-sensitive user data. For example, this is the response when POSTing /app/user/get_user_info which contains ‘open_user_id’
{
“ts”: 1620861747291,
“code”: “1”,
“msg”: “”,
“data”: {
“logo”: “”,
“nickname”: “user.name@example.com”,
“email”: “user.name@examples.com”,
“user_code”: “”,
“user_center_id”: “1A2bxyzxyz123”,
“open_user_id”: “1234567”
}
}
That leads me to believe there is an API either available now or in the works to get at some ‘socialized’ user data.
My plan in the meantime was to capture and encrypt the user data and store that in a database. I may create a simple web application to start. And then develop it into a mobile application; that will likely depend on how much more I learn about the other APIs.
This is a custom component for HomeAssistant, but maybe you can add the API it uses to your Postman collection
I think i’m missing something, i’m making successful API calls but not getting and data in return. Wondering if it’s because i have MFA enabled on my account. What do you think?
Yeah you can’t have MFA on.
I’ll have to dig through the apk to find the calls for that and find a way to integrate it then.
re; MFA, I think that you can actually use the API to auth via the MFA code workflow via the following method
https://auth-beta.api.wyze.com/api/v2/users/me/mfa
etc
I found those here Pages · JoshuaMulliken/ha-wyzeapi Wiki · GitHub.
Adding on…
Re: phone UUID, that is actually not the phone IMEI or similar hardware identifier. I believe that is a UUID v4 string generated by Wyze to register a device to their service when using their app.
that is actually not the phone IMEI or similar hardware identifier. I believe that is a UUID v4 string generated by Wyze to register a device to their service when using their appthat is actually not the phone IMEI or similar hardware identifier. I believe that is a UUID v4 string generated by Wyze to register a device to their service when using their app
IMEI would be “Google/Apple/Facebook” evil level (not that Wyze wouldn’t get away with it these days…) but I’m pretty sure they are using the SSAID (Android Device ID) that is pretty bad practice.
If the UUID was generated by Wyze (slightly better practice) would be impossible for applications like Tiny cam to emulate the official App.
One possibility would be that Alexey Vasilyev (Tiny Cam developer) sniffed his own phone IDs and hardcode those in TinyCam.
That would be incredibly stupid and you would expect that Wyze would notice a million access per day from the same device from all over the world but I learned to never underestimate how crappy these IOT companies are.
So I still believe is SSAID (and that’s why I think Tiny Cam can’t be ported on IOS or PC).
Welp, looks like we reminded Wyze their app could be exploited.
Coincidence this came out right after we were discussing the app.
Probably coincidence ![]()
It’s not that they didn’t know that other developers were accessing their servers “spoofing” the official App.
Tiny cam developer is an user here and he never had any problem in admitting that.
The concept that users would trust him with their Wyze credential and that Wyze would be ok with that is completely mind blowing to me but I’m probably missing something.
Even weirder is that the Tiny cam developer works for Wyze now but he still works on his own app even selling his own cloud subscription.
Really? That’s interesting. Hopefully Wyze doesn’t sll of a sudden ask him to stop supporting TinyCam.
Good morning!
I have spent my morning coffee reading this thread and will admit to being discouraged. I love my Wyze Cameras and don’t really even mind the app and the cloud storage. Unfortunately I am committed to Home Assistant as the backbone of my Smart Home. I have needs for several more cameras and will be forced to switch to a different camera due to the lack of a public api. Wyze you have distinguished yourself so far with your commitment to customer satisfaction but you are turning a deaf ear to this issue, and are sacrificing long term success and profitability for short term gains. It is a business model, but not one with a viable future. Please consider this my joining the chorus of users asking respectfully for you to provide this important option.
Thank you!
I wonder if Wyze actually read this thread.
We are clearly a hardcore home automation group who are pissed at them but I doubt they know we exist. I guess we can all wish them good luck selling their cloud storage plans.
Bye all!
mic drop
They read all of it.
But they also ignore all of it.
They won’t expand to our hobby craft.
Yep. Best to spend your money elsewhere
It’s looking that way.
I only bought one WyzeCam but it appears it’ll be my last.
I’ll buy some generic cameras from China that work fine with Home Assistant instead.
No biggie.
anyone that was using the unofficial API calls find that they stopped working recently?
I’d like to take snapshots of my 4 Wyze Cams, 1 every hour or so and save it on my cloud storage I can later do time-lapses or just to compare the seasons in our yard, etc. Does anyone know of any way I could do this preferably with Python? If not with Wyze cameras can you recommend a different brand that supports open APIs?
Thanks,
Peter
Please have my vote, I would love to have an API that gives me Wyze Pan Camera controls so I could have those motor controls, would be very useful in making some tracking apps.