Meta WABA Profile, Phone Numbers & Graph API v20.0
The official gateway connecting NotifyIQ to the Meta WhatsApp Cloud API. Complete Meta Embedded Signup, register business phone numbers with a 6-digit PIN, sync verified business profiles, and monitor real-time Graph API audit logs.
1. Purpose of the Page
This page manages the direct handshake between your NotifyIQ tenant workspace and the Meta WhatsApp Business Platform. Whether onboarding via Meta's Guided Embedded Signup popup or entering direct system user credentials, this console stores encrypted tokens (AES-256-GCM), provisions phone numbers, updates verified business metadata displayed to customers on WhatsApp, and streams live API transaction telemetry.
2. Who Uses It (Target Roles)
Connects the Meta Business Manager, authorizes scopes, and registers new phone numbers.
Updates WhatsApp profile pictures, business category vertical, website URLs, and company bio.
Inspects HTTP status codes and payloads in the real-time Meta Graph API audit log.
Interactive Visual Preview
3. Step-by-Step: Connecting and Managing WABA
- Launch Meta Embedded Signup: Click the Continue with Facebook button. The official Meta modal opens. Log in, select or create your Meta Business Manager, pick or register your WhatsApp phone number, and grant permissions.
- Authorize Cloud API Permissions: Confirm the two mandatory permissions requested:
whatsapp_business_managementandwhatsapp_business_messaging. - Select Your Active WhatsApp Number: If your WABA has multiple numbers, use the Select Active Phone dropdown to set the default dispatcher. Quality rating indicators (
GREEN,YELLOW,RED) display phone health. - Update WhatsApp Business Profile: Fill in your company About, Support Email, Website URLs, and select your Industry Vertical. Click Sync to Meta Cloud API to push updates to WhatsApp handsets globally.
- Inspect Real-Time Graph API Logs: Monitor the real-time API inspection panel to verify outbound dispatches, template syncs, and Meta response codes.
4. Meta Graph API v20.0 Endpoints Reference
| Endpoint Route | HTTP Method | Permission Scope | Functionality |
|---|---|---|---|
| /v20.0/oauth/access_token | GET | Embedded Signup Code | Exchanges temporary authorization code for long-lived permanent system user token. |
| /v20.0/{waba_id}/phone_numbers | GET | whatsapp_business_management | Lists all phone numbers, display names, and real-time quality ratings. |
| /v20.0/{phone_id}/register | POST | whatsapp_business_management | Registers a phone number on Meta Cloud API using a 6-digit PIN. |
| /v20.0/{phone_id}/whatsapp_business_profile | POST / GET | whatsapp_business_management | Updates and retrieves about, address, description, email, vertical, and websites. |
5. Behind the Scenes: AES-256-GCM Token Encryption
Meta API tokens grant sensitive access to customer communications. NotifyIQ implements strict enterprise cryptographic safeguards:
- AES-256-GCM Vaulting: Permanent Meta access tokens are encrypted before storage using AES-256-GCM with unique initialization vectors (
iv) and authentication tags (authTag). - Subscribed Apps Handshake: Upon successful connection, NotifyIQ automatically calls
POST /v20.0/{phone_number_id}/subscribed_apps, registering our webhook receiver with Meta's event dispatcher. - Safe Disconnection: Clicking Disconnect immediately wipes encrypted tokens from the database, halts outbound queue processing, and unregisters webhooks.
6. Common Errors & FAQs
No. A phone number can only be registered on either personal WhatsApp or WhatsApp Business Platform (API) at one time. If using an existing number, you must first delete the WhatsApp account on your mobile handset before registering it with the Cloud API.
A RED quality rating indicates that multiple recipients have reported your messages as spam or blocked your number. Meta may temporarily throttle your outbound messaging tier. Pause broadcast campaigns and review DPDP consent records.