Step 01
WhatsApp Business API
WhatsApp Webhooks for Messages and Status Updates
Choose which WhatsApp events your application receives and where Robofy sends them. Connect a WhatsApp Business Account to your HTTPS endpoint and subscribe to incoming messages, delivery updates, template status changes, and supported account alerts.
Choose your account. Add your endpoint. Select your events.
How It Works
From WhatsApp Event to Your Application
A selected WhatsApp event is packaged as a JSON POST request, signed with your configured secret, and delivered to the HTTPS endpoint you control.
WhatsAppEvent received
Your endpointReceives payload200 OK
01
Match a subscriptionRobofy forwards only the WhatsApp events selected for this webhook.
02
Sign the payloadYour secret produces an HMAC-SHA256 signature in the request header.
03
Verify and respondYour application validates the signature, processes the JSON, and returns a successful response.
Event Subscriptions
Choose the WhatsApp Events Your Application Needs
Subscribe to one event type or combine several in the same webhook configuration.
Incoming Message
Trigger: A customer sends a WhatsApp message.
Process the reply, update a customer record, or trigger a configured workflow.
Delivery Status
Trigger: A supported message status update is received.
Update sent, delivered, read, or failed status in your message records.
Account Status
Trigger: Meta sends a supported account alert.
Notify the team responsible for investigating account alerts.
Template Status
Trigger: Meta reports a template status change.
Keep template records and operational workflows informed.
Setup
Configure Your WhatsApp Webhook in Robofy
Set the account, destination, event subscriptions, and request settings in the Create Webhook form.
Step 02
Choose the endpoint that receives events
Enter the HTTPS URL for your application. Robofy forwards selected WhatsApp events there as JSON POST requests.Step 03
Subscribe to the signals that matter
Choose only the messages, delivery updates, account alerts, and template status changes your application needs.Step 04
Protect delivery, then create
Add a secret key for HMAC-SHA256 verification, set a timeout, and save a webhook that is ready to receive traffic.Prerequisite: A connected WhatsApp Business Account and a receiving HTTPS endpoint that accepts JSON POST requests.
SecurityView Webhook Verification Guide
Authenticate Every Webhook Request
Add a secret key and Robofy signs each forwarded payload with HMAC-SHA256. Your endpoint can confirm the signature before it processes the event.
The signature is delivered in the X-Hub-Signature-256 request header and verified with the same secret.
Keep the secret server-sideStore the secret with your endpoint configuration, never in client-side code.
Verify before processingCalculate the signature from the received payload and compare it with the request header.
Accept trusted requestsProcess the WhatsApp event only after the signature check succeeds.
Dashboard
Manage Your WhatsApp Webhooks in One Place
Review your configured webhooks, see their selected events, and manage their active status from the webhook list.
View Your Connections
Identify each webhook by its name, destination URL, connected account, and event subscriptions.
Update a Configuration
Edit the webhook when your endpoint, subscriptions, or request settings change.
Enable or Disable
Switch a webhook between Active and Inactive while keeping its saved configuration.
View Logs
Access webhook logs for a configured webhook.
Delete
Remove webhook configurations that are no longer required.
FAQ
Frequently Asked Questions
What is a WhatsApp webhook?
A WhatsApp webhook delivers event notifications to an application, such as an incoming customer message or a delivery status update. In Robofy, you configure the receiving URL, select a WhatsApp Business Account, and choose which supported events to forward.
Which WhatsApp webhook events does Robofy support?
Robofy supports Incoming Message, Delivery Status, Account Status, and Template Status subscriptions. Account Status covers supported account alerts received from Meta.
Can one webhook receive multiple event types?
Yes. Select one or several supported event types when creating the webhook. You can update the subscriptions later by editing the configuration.
Can I connect a webhook to a specific WhatsApp Business Account?
Yes. Each webhook configuration is associated with a selected connected WhatsApp Business Account.
Can I receive WhatsApp delivery and read status updates?
Yes. The Delivery Status subscription covers supported sent, delivered, read, and failed updates when available.
How do I verify a webhook request from Robofy?
Configure a secret key for the webhook. Robofy uses it to sign forwarded payloads with HMAC-SHA256 and includes the signature in the X-Hub-Signature-256 header. Your endpoint verifies the signature using the same secret.
What should my endpoint do after it receives a WhatsApp webhook?
First verify the X-Hub-Signature-256 header with the secret configured for the webhook. After accepting the request, process the JSON event in your application and return a successful HTTP response.
Does receiving a webhook automatically send a WhatsApp reply?
No. Receiving a webhook provides event data to your application. Sending a reply is a separate action through a supported messaging API or Robofy sending workflow.
Can I disable a webhook without deleting it?
Yes. Use the Active/Inactive control in the webhook list. Disabling a webhook keeps its configuration available so you can enable it again later.
Create Your WhatsApp Webhook
Choose your WhatsApp Business Account, add your endpoint, and select the events your application needs to receive.