WhatsApp · AsyncAPI Specification
WhatsApp Webhooks
Version 21.0
WhatsApp Business Platform webhooks deliver real-time notifications for incoming messages, message status updates, template status changes, account updates, phone number quality changes, and security events. All webhook payloads are sent as HTTP POST requests signed with HMAC-SHA256 using the app secret via the X-Hub-Signature-256 header. Your endpoint must respond with HTTP 200 immediately and process events asynchronously.
Channels
/webhook
Receive webhook events
Receives all WhatsApp Business Platform webhook events. The field property in each change entry determines the event type.
Messages
IncomingMessage
Incoming Message Notification
A user sent a message to your WhatsApp Business number
MessageStatus
Message Status Update
Status update for a sent message (sent, delivered, read, failed)
TemplateStatusUpdate
Message Template Status Change
A message template was approved, rejected, or had its status changed
AccountUpdate
Account Policy Update
Policy enforcement or account restriction notification
PhoneNumberQualityUpdate
Phone Number Quality Rating Change
Phone number quality rating changed (flagged or unflagged)
SecurityEvent
Security Alert
Security-related event such as PIN change
Servers
https
webhookEndpoint
{webhookUrl}
Your HTTPS webhook endpoint configured in the Meta App Dashboard. Must respond to GET requests for verification and POST requests for event delivery.