Navigation

Webhook Configuration & Live Inspector

Graph v22.0

Subscribe your Meta Cloud API App to real-time events: customer messages, delivery receipts, opt-outs, and live debugging stream.

Meta Cloud API Ingress Endpoints

Copy these values into your Meta App Dashboard > WhatsApp > Configuration > Webhook.

Callback URL Live Ingress

https://api.pulseapp.io/v1/webhooks/whatsapp

Verify TokenRequired for Meta handshake

••••••••••••••••••••••••••

Live Ingress Simulator

Dispatch synthetic payloads directly to your ingress receiver to test webhook processing and live streaming.

Live Webhook Stream & Inspector

Live Stream Active

Real-time stream of parsed Meta Cloud API webhooks received by your backend instance.

Filter:

Showing 0 events

No webhook events captured yet

Trigger a test event using the Live Ingress Simulator above or send a message to your verified WhatsApp business phone number.

Signature Verification Architecture (HMAC-SHA256)

All incoming POST requests from Meta include the X-Hub-Signature-256 header. The backend validates this signature against your Meta App Secret before processing any payload.

const crypto = require('crypto');
function verifyMetaSignature(req, appSecret) {
  const signature = req.headers['x-hub-signature-256'];
  const expectedSignature = 'sha256=' + crypto.createHmac('sha256', appSecret).update(req.rawBody).digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature));
}