Skip to content

Getting Meta Credentials

Collect the credentials you will need to configure a phone number in the wacraft UI: META_APP_SECRET, WABA_ACCOUNT_ID, WABA_ID and WABA_ACCESS_TOKEN (permanent).

In v0.2.x these are entered directly in the Phone Config screen — not in .env. See Phone Config Guide for where each field goes.

1 — Create a Business‑type Meta App & copy META_APP_SECRET

  1. Go to https://developers.facebook.com, click My Apps → Create App, select Business and finish the wizard.
  2. In the new app, open Settings → Basic. Hit Show next to App Secret, enter your Facebook password and copy the value.

This is your Meta App Secret (used to verify webhook signatures).

2 — Enable WhatsApp & grab WABA_ACCOUNT_ID

  1. In the left menu choose WhatsApp → API Setup. Finish the sandbox step that verifies a personal number. (Facebook Developers)
  2. After verification, a blue panel shows your WhatsApp Business Account ID — copy this string. (Facebook Developers)

(You can always find it again in Business Settings → Accounts → WhatsApp Accounts.)

3 — Find the Phone Number ID (WABA_ID)

Option A — Dashboard

Right below your sandbox number on the API Setup screen you'll see Phone Number ID. Copy it. (Facebook Developers)

Option B — Graph API

curl -H "Authorization: Bearer <TEMP_OR_PERM_TOKEN>" \
  "https://graph.facebook.com/v19.0/<WABA_ACCOUNT_ID>/phone_numbers?fields=id,display_phone_number"

The returned id is the Phone Number ID (WABA ID). (Facebook Developers)

4 — Generate a Permanent WABA_ACCESS_TOKEN

Short‑lived sandbox tokens expire after 24 h; create a never‑expiring one via System Users.

  1. Open Business Settings (nine‑dot launcher → Business Settings). (Facebook Developers)
  2. Under Users, select System Users → Add → choose Admin. (Facebook Developers)
  3. With the new system user selected, click Add Assets and grant Full Control to both your App and your WhatsApp Business Account. (Facebook Developers)
  4. Press Generate Token, pick your app, tick scopes whatsapp_business_messaging and whatsapp_business_management, then generate. (Stack Overflow)
  5. Copy the token shown once.

Keep it secret! Anyone with this token can message from your number. Rotate only via System Users. (Facebook Developers)

✅ Checklist

Credential Where you found it Phone Config field
META_APP_SECRET App Dashboard → Settings → Basic → App Secret Meta App Secret
WABA_ACCOUNT_ID WhatsApp API Setup banner WABA Account ID
WABA_ID Phone Number ID line or Graph API call WABA ID
WABA_ACCESS_TOKEN Business Settings → System Users → Generate Token Access Token

Next page: Phone Config — enter these credentials in the UI.