Encryption

Endpoints for WhatsApp Business encryption features

Get Business Encryption Public Key

get

Retrieve the current business public key and its signature verification status. The public key is used for encrypting message payloads and data channel requests.

Authorizations

D360-API-KEY

D360-API-KEYstringRequired

API Key for Messaging API authentication. Send your API key in the D360-API-KEY header.

Query parameters

fieldsstringOptional

Comma-separated list of fields to include. Available fields: business_public_key, business_public_key_signature_status

Responses

200

Business encryption public key retrieved successfully

application/json

400

Bad request - Invalid parameters or malformed request

application/json

401

Unauthorized - Invalid or missing API key

application/json

403

Forbidden - Insufficient permissions to access this phone number

application/json

404

Not found - Phone Number ID does not exist or is not accessible

application/json

429

Too many requests - Rate limit exceeded

application/json

500

Internal server error

application/json

get

/whatsapp_business_encryption

HTTPcURLJavaScriptPython

GET /whatsapp_business_encryption HTTP/1.1
Host: waba-v2.360dialog.io
D360-API-KEY: YOUR_API_KEY
Accept: */*

{
  "data": [
    {
      "business_public_key": "-----BEGIN PUBLIC KEY-----\nAAA...\n-----END PUBLIC KEY-----",
      "business_public_key_signature_status": "VALID"
    }
  ]
}

Set Business Encryption Public Key

post

Upload and configure a business public key for message payload encryption. The key must be a valid RSA public key in PEM format. Only one active public key per phone number at a time; previous keys are replaced when a new one is uploaded.

Authorizations

D360-API-KEY

D360-API-KEYstringRequired

API Key for Messaging API authentication. Send your API key in the D360-API-KEY header.

Body

application/x-www-form-urlencodedmultipart/form-data

stringOptional

Responses

200

Public key successfully uploaded and signed

application/json

400

Bad request - Invalid key format or malformed request

application/json

401

Unauthorized - Invalid or missing API key

application/json

403

Forbidden - Insufficient permissions to modify encryption settings

application/json

404

Not found - Phone Number ID does not exist or is not accessible

application/json

429

Too many requests - Rate limit exceeded

application/json

500

Internal server error

application/json

post

/whatsapp_business_encryption

HTTPcURLJavaScriptPython

POST /whatsapp_business_encryption HTTP/1.1
Host: waba-v2.360dialog.io
D360-API-KEY: YOUR_API_KEY
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 6

"'text'"

application/x-www-form-urlencodedmultipart/form-data

{
  "success": true
}