WhatsApp

Connect WhatsApp Business to send governed messages, manage templates, and receive inbound chat.

What you can do#

Connect a WhatsApp Business phone number to your LumenFlow workspace. Sidekick can send messages (including template messages), manage approved templates, and receive inbound WhatsApp messages.

ActionDescriptionStatus
Send messageSend text messages to WhatsApp usersShipped
Send templateSend pre-approved template messages with parametersShipped
List templatesView synced approved templates from your WABAShipped
Receive messagesIngest inbound messages via Meta webhookShipped
Webhook verificationHandle Meta's hub.verify challengeShipped
Approval routingRoute outbound messages through approval workflowShipped

Setup#

  1. Get your WhatsApp Business credentials from the Meta Business Suite:
    • Permanent Access Token (System User token with whatsapp_business_messaging permission)
    • Phone Number ID
    • WhatsApp Business Account (WABA) ID
    • App Secret (from your Meta App settings)
  2. Go to Settings > Connections in LumenFlow
  3. Click Add Connection > WhatsApp
  4. Enter all four credentials
  5. Click Save

LumenFlow will:

  • Validate the phone number against the WhatsApp Cloud API
  • Sync your approved message templates
  • Generate a unique webhook URL and verify token

warning Use a permanent System User token, not a temporary token from the API Setup page. Temporary tokens expire after 24 hours and will break the integration.

Webhook setup#

After saving, register the webhook in Meta's App Dashboard:

  1. Open the Meta App Dashboard
  2. Go to WhatsApp > Configuration > Webhook
  3. Set the Callback URL to:
https://your-domain.com/api/v1/sidekick/integrations/whatsapp/webhook?key=<unique-key>
  1. Set the Verify Token to the value shown in LumenFlow's connection status panel
  2. Click Verify and Save
  3. Subscribe to the messages webhook field

info LumenFlow handles the Meta verification challenge automatically. When Meta sends the hub.verify_token challenge, LumenFlow responds with the hub.challenge value if the token matches.

Template messages#

WhatsApp requires pre-approved templates for initiating conversations outside the 24-hour customer service window. LumenFlow syncs your approved templates during setup.

To send a template message, include the template name, language code, and any parameters in your send request. Templates are listed at Settings > Connections > WhatsApp > Templates.

Security#

  • Phone number validation -- the WhatsApp Cloud API is called during setup to verify the phone number id is accessible
  • Meta signature verification -- every inbound webhook is verified using the X-Hub-Signature-256 header and your App Secret, following Meta's standard HMAC-SHA256 scheme
  • Rate limiting -- distributed per-integration and per-workspace limits
  • Credentials encrypted at rest -- your access token and app secret are encrypted before storage

Disconnecting#

To remove the integration, go to Settings > Connections > WhatsApp and click Disconnect. Remember to also remove the webhook subscription in the Meta App Dashboard.