WhatsApp Business API

WhatsApp Webhooks for Messages and Status Updates

Choose which WhatsApp events your application receives and where Robofy sends them. Connect a WhatsApp Business Account to your HTTPS endpoint and subscribe to incoming messages, delivery updates, template status changes, and supported account alerts.

Choose your account. Add your endpoint. Select your events.

How It Works

From WhatsApp Event to Your Application

A selected WhatsApp event is packaged as a JSON POST request, signed with your configured secret, and delivered to the HTTPS endpoint you control.

Live event routeHTTPS · JSON POST · HMAC-SHA256
WhatsAppEvent received
RobofyRoutes + signsHMAC-SHA256
Your endpointReceives payload200 OK
01

Match a subscriptionRobofy forwards only the WhatsApp events selected for this webhook.

02

Sign the payloadYour secret produces an HMAC-SHA256 signature in the request header.

03

Verify and respondYour application validates the signature, processes the JSON, and returns a successful response.

Event Subscriptions

Choose the WhatsApp Events Your Application Needs

Subscribe to one event type or combine several in the same webhook configuration.

Incoming Message

Trigger: A customer sends a WhatsApp message.

Process the reply, update a customer record, or trigger a configured workflow.

Delivery Status

Trigger: A supported message status update is received.

Update sent, delivered, read, or failed status in your message records.

Account Status

Trigger: Meta sends a supported account alert.

Notify the team responsible for investigating account alerts.

Template Status

Trigger: Meta reports a template status change.

Keep template records and operational workflows informed.

Setup

Configure Your WhatsApp Webhook in Robofy

Set the account, destination, event subscriptions, and request settings in the Create Webhook form.

Step 01

Give this webhook a clear identity

Start with a name your team will recognise in the webhook list and activity logs. It makes every later change easier to trace.

Step 02

Choose the endpoint that receives events

Enter the HTTPS URL for your application. Robofy forwards selected WhatsApp events there as JSON POST requests.

Step 03

Subscribe to the signals that matter

Choose only the messages, delivery updates, account alerts, and template status changes your application needs.

Step 04

Protect delivery, then create

Add a secret key for HMAC-SHA256 verification, set a timeout, and save a webhook that is ready to receive traffic.
Prerequisite: A connected WhatsApp Business Account and a receiving HTTPS endpoint that accepts JSON POST requests.
Security

Authenticate Every Webhook Request

Add a secret key and Robofy signs each forwarded payload with HMAC-SHA256. Your endpoint can confirm the signature before it processes the event.

The signature is delivered in the X-Hub-Signature-256 request header and verified with the same secret.

Keep the secret server-sideStore the secret with your endpoint configuration, never in client-side code.
Verify before processingCalculate the signature from the received payload and compare it with the request header.
Accept trusted requestsProcess the WhatsApp event only after the signature check succeeds.
View Webhook Verification Guide
Dashboard

Manage Your WhatsApp Webhooks in One Place

Review your configured webhooks, see their selected events, and manage their active status from the webhook list.

View Your Connections

Identify each webhook by its name, destination URL, connected account, and event subscriptions.

Update a Configuration

Edit the webhook when your endpoint, subscriptions, or request settings change.

Enable or Disable

Switch a webhook between Active and Inactive while keeping its saved configuration.

View Logs

Access webhook logs for a configured webhook.

Delete

Remove webhook configurations that are no longer required.

FAQ

Frequently Asked Questions

What is a WhatsApp webhook?

A WhatsApp webhook delivers event notifications to an application, such as an incoming customer message or a delivery status update. In Robofy, you configure the receiving URL, select a WhatsApp Business Account, and choose which supported events to forward.

Which WhatsApp webhook events does Robofy support?

Robofy supports Incoming Message, Delivery Status, Account Status, and Template Status subscriptions. Account Status covers supported account alerts received from Meta.

Can one webhook receive multiple event types?

Yes. Select one or several supported event types when creating the webhook. You can update the subscriptions later by editing the configuration.

Can I connect a webhook to a specific WhatsApp Business Account?

Yes. Each webhook configuration is associated with a selected connected WhatsApp Business Account.

Can I receive WhatsApp delivery and read status updates?

Yes. The Delivery Status subscription covers supported sent, delivered, read, and failed updates when available.

How do I verify a webhook request from Robofy?

Configure a secret key for the webhook. Robofy uses it to sign forwarded payloads with HMAC-SHA256 and includes the signature in the X-Hub-Signature-256 header. Your endpoint verifies the signature using the same secret.

What should my endpoint do after it receives a WhatsApp webhook?

First verify the X-Hub-Signature-256 header with the secret configured for the webhook. After accepting the request, process the JSON event in your application and return a successful HTTP response.

Does receiving a webhook automatically send a WhatsApp reply?

No. Receiving a webhook provides event data to your application. Sending a reply is a separate action through a supported messaging API or Robofy sending workflow.

Can I disable a webhook without deleting it?

Yes. Use the Active/Inactive control in the webhook list. Disabling a webhook keeps its configuration available so you can enable it again later.

Create Your WhatsApp Webhook

Choose your WhatsApp Business Account, add your endpoint, and select the events your application needs to receive.