Skip to content

WhatsApp Business Credential - Messaging API

A WhatsApp Business credential allows your workflows to send and receive messages through the official WhatsApp Business API. It integrates with Meta Business Suite and requires a Meta developer account.


FieldDescriptionExample
Access TokenMeta permanent access tokenEAAGn...
Phone Number IDRegistered phone number ID1234567890
Business Account IDWhatsApp Business account ID9876543210

  1. Go to business.facebook.com
  2. Create a Meta Business account if you don’t have one
  3. Complete business verification
  1. Go to developers.facebook.com
  2. Click My Apps > Create App
  3. Select the Business type
  4. Name your app and associate it with your business account
  5. In the app dashboard, find WhatsApp and click Set Up
  1. In WhatsApp settings, select or create your WhatsApp Business account
  2. Add a phone number (you can use the test number provided by Meta for testing)
  3. Note the Phone Number ID shown in the configuration
  1. In your Meta app, go to System Users in business settings
  2. Create a System User with admin role
  3. Assign permissions: whatsapp_business_management and whatsapp_business_messaging
  4. Generate a permanent token for the System User
  5. Copy the generated token
  1. In Meta Business Suite, go to WhatsApp Manager
  2. The Business Account ID appears in the URL or in the settings section
  3. You can also find it in Business Settings > Accounts > WhatsApp Accounts

To receive incoming messages, configure a webhook:

  1. In your Meta app, go to WhatsApp > Configuration
  2. In the Webhooks section, set the Floogos callback URL
  3. Subscribe to events: messages, message_deliveries, message_reads

  • Temporary tokens expire every 24 hours
  • Generate a permanent token through System Users
  • Verify the phone number is correctly registered in WhatsApp Business
  • The number must complete the verification process
  • Verify the recipient has initiated a conversation (24-hour window) or use an approved template
  • Confirm your Meta app is in Live mode (not Development)
  • Ensure the System User has the correct permissions assigned
  • Verify the app has access to the WhatsApp Business account

  • Always use System User tokens instead of personal tokens
  • Never expose the Access Token in client-side code
  • Configure signature verification on webhooks
  • Limit System User permissions to the strictly necessary
  • Monitor usage and costs from Meta Business Suite
  • Rotate tokens periodically