API Keys

API Keys provide secure access to the WhatsApp Business API on behalf of clients. Partners can generate API Keys only if they have the required permissions for the relevant number or channel. Permissions depend on the Partner Hub settings and the client’s account type.

Partner Permissions Overview

Permission to generate API Keys is determined by the account type:

• Partner Payment: Partners can manage channels by default.

• Direct Payment: Partners cannot manage channels by default. Clients must grant access for API Key management. Clients can revoke or re-grant access at any time via their Client Hub Settings.

Having permission to a number/channel means that the Partner can generate new API Keys.

Standard Permission depends on the Partner Hub Settings:

Checking Permissions

Partners can verify if they have permission to generate API Keys for a client’s channels through the Partner API.

Using the Partner Hub

1. Navigate to Manage Account → Details → WhatsApp Channel → Partner API Key Permission.

2. Status will display as:

   • Shared – Permission is granted.

   • Missing – Permission has not been shared.

Requesting Permission

Integrated Onboarding

During onboarding, Partners can trigger the /permission screen to prompt the client to grant permission for all or specific numbers/channels.

Client Hub

Clients can grant or edit permissions at any time in the Client Hub:

1. Log in > Profile Menu > Partner.

2. View current permissions and grant access as needed.

---

Generating API Keys

API Keys can only be generated when Partners have permission for a specific number/channel. Partners can generate keys:

Using the Partner API

Partners can create an API Key programmatically for a specific channel.

Using the Partner Hub

1. Navigate to the WABA Management App.

2. Permitted users will see the Generate API Key button active.

3. If permission is missing, the button will be greyed out.

"API keys are disabled for this number. The number was shared with your integration partner. With your permission, the partner has access to the WhatsApp Business API on your behalf. To manage permissions go to 'Organization Settings' or contact your partner."

---

Permission Flow by Account Type

Direct Payment Channels

• Partners must request permission via the Integrated Onboarding /permission screen.

• Users without permission will see the Generate API Key button greyed out.

• Clients can manage Partner API permissions anytime via Client Hub → Profile Menu → Partner.

Partner Payment Channels

• Permissions are shared by default.

• Permitted users have the Generate API Key button active.

• Clients see the same message as noted above if attempting to generate their own API Key.

Important: A Redirect URL must be set in the Partner Account for the permission flow to function correctly. If not set, the default is http://app.360dialog.io.