WhatsApp Business

Overview

Use WhatsApp Business credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	whatsapp-business
Category	Communication
Credential Type	Bearer Token

Step 1: Get Credentials

Log in to Meta for Developers

Log in to Meta for Developers at developers.facebook.com/apps/.

Select the application

Select the application (or create one with WhatsApp product).

Go to WhatsApp → API Setup

Go to WhatsApp → API Setup in the left sidebar.

Generate an access token

Generate a temporary access token or create a system user token for production.

Copy your access token

Copy the access token.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add WhatsApp Business

Go to Managed Secrets > Add Provider > WhatsApp Business.

Enter credentials

Paste your Access Token into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.POST,
    "https://graph.facebook.com/YOUR_API_VERSION/YOUR_PHONE_NUMBER_ID/messages",
    grant_id="YOUR_GRANT_ID",
    json={
        "messaging_product": "whatsapp",
        "to": "15551234567",
        "type": "text",
        "text": {"body": "Hello from Alter"},
    },
)

Notes

• Temporary tokens expire after 24 hours. For production, create a System User token in Business Settings.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
messages/send	send	POST	/{api_version}/{phone_number_id}/messages
media/upload	write	POST	/{api_version}/{phone_number_id}/media
media/delete	delete	DELETE	/{api_version}/{media_id}
business_profile/get	read	GET	/{api_version}/{phone_number_id}/whatsapp_business_profile
business_profile/update	write	POST	/{api_version}/{phone_number_id}/whatsapp_business_profile
message_templates/create	write	POST	/{api_version}/{waba_id}/message_templates
message_templates/list	read	GET	/{api_version}/{waba_id}/message_templates
message_templates/delete	delete	DELETE	/{api_version}/{waba_id}/message_templates
phone_numbers/list	read	GET	/{api_version}/{waba_id}/phone_numbers
phone_numbers/register	admin	POST	/{api_version}/{phone_number_id}/register
phone_numbers/deregister	admin	POST	/{api_version}/{phone_number_id}/deregister
phone_numbers/request_code	admin	POST	/{api_version}/{phone_number_id}/request_code
phone_numbers/verify_code	admin	POST	/{api_version}/{phone_number_id}/verify_code
subscribed_apps/create	admin	POST	/{api_version}/{waba_id}/subscribed_apps
subscribed_apps/list	read	GET	/{api_version}/{waba_id}/subscribed_apps