Preview
JSON
Things that trip people up
- Free-form messages (text, buttons, lists) can only be sent within 24 hours of the user's last message. Outside that window you need an approved template.
- Button replies arrive at your webhook as messages[].interactive.button_reply with the id you chose; list replies as list_reply.
- Verify the X-Hub-Signature-256 header on every webhook delivery.
- Use a System User token in production instead of the temporary token from the app dashboard.
Related: Webhook signature generator, WhatsApp Cloud API guide.