Official integration guide
WhatsApp Cloud API: from business setup to a safe first test
The official connection requires company-owned Meta assets and credentials. A Yoco account is quick to create; approval, phone number, and webhook setup depend on Meta and the business owner.
1. Prepare business assets
Confirm ownership and avoid unmanaged personal accounts.
- ✓Meta business portfolio and administrators.
- ✓WhatsApp Business Account and an eligible phone number.
- ✓Display name, legal details, and payment method when applicable.
2. Configure the app
Associate WhatsApp, the phone number, and required permissions. Keep production credentials on the server only.
3. Secure the webhook
Validate the verification token, verify every POST signature, reject invalid events, and process each message identifier once.
4. Add catalog and rules
Products, prices, boundaries, and handover criteria must be ready before automatic replies are enabled.
5. Test before launch
Run positive and negative cases.
- ✓Valid message, duplicate message, and invalid signature.
- ✓Unknown product, unconfirmed price, and human request.
- ✓Model failure, Meta outage, and replay attempt.
6. Monitor
Track delivery, failure, response time, handovers, corrections, and catalog quality. Rotate credentials after ownership changes or suspected exposure.
Use official documentation
Need guided onboarding?
The pilot validates credentials, webhook, catalog, and a test conversation without exposing keys in the browser.
Request onboarding