Public API + signed webhooks

OAuth 2.0, REST, signed webhooks, replay window.

A real developer surface — OAuth 2.0 client-credentials and authorization-code flows, REST endpoints under /v1/messages, /v1/contacts, /v1/templates, HMAC-SHA256-signed webhooks with retry and replay.

Public API + signed webhooks
OAuth 2.0, REST, signed webhooks, replay window.
  • OAuth 2.0 + bearer-token auth
  • REST endpoints by area: messages, contacts, templates, broadcasts, agents
  • HMAC-SHA256 webhook signatures + retry with exponential backoff
  • Replay any failed webhook delivery for up to 30 days
  • Per-endpoint per-plan rate limits, published transparently
  • OpenAPI 3.1 spec + SDKs in 6 languages
What you get

Everything public api + signed webhooks can do

01

OAuth 2.0 + bearer-token auth

02

REST endpoints by area: messages, contacts, templates, broadcasts, agents

03

HMAC-SHA256 webhook signatures + retry with exponential backoff

04

Replay any failed webhook delivery for up to 30 days

05

Per-endpoint per-plan rate limits, published transparently

06

OpenAPI 3.1 spec + SDKs in 6 languages

More in the platform

Pairs well with

Try Public API + signed webhooks on a real WhatsApp number.

Free Meta test number on signup. No credit card.