WhatsApp Webhooks

Receive webhooks from the WhatsApp Business Platform (Cloud API), delivered by Meta's Graph API. WhatsApp webhooks are Meta webhooks: they require a one-time GET verification handshake and sign every POST with X-Hub-Signature-256. They do not follow the Standard Webhooks spec.

When to Use This Skill

• How do I receive WhatsApp webhooks?
• How do I complete the WhatsApp / Meta webhook verification handshake (hub.challenge)?
• How do I verify the WhatsApp X-Hub-Signature-256 signature?
• Why is my WhatsApp webhook signature verification failing?
• How do I handle inbound WhatsApp messages vs. message status updates?

Two Things Every Endpoint Must Do