REST API
Scoped, revocable keys
Webhooks
Signed with HMAC-SHA256
Team roles
Owner, admin, agent, viewer
Encryption
AES-256-GCM for access tokens
Platform
Everything your team needs in one place
From the first message to the closed deal.
Shared team inbox
Work one WhatsApp number together, with assignment, status and notes on every conversation.
Contacts
Keep customers organised with tags and custom fields. Import from CSV and remove duplicates.
Sales pipelines
Track deals on a Kanban board, linked to the conversations behind them.
Broadcasts
Send Meta-approved templates to your audience and track delivery and reads.
No-code automations
Trigger on messages, keywords, new contacts or a schedule, with branches, waits and webhooks.
AI replies
Draft replies with your own OpenAI or Anthropic key, and answer from your own knowledge base.
For developers
Connect WhatsApp to your own applications
Send messages, sync contacts and react to events from your own systems. Requests use a simple REST API, and webhooks tell you when something happens.
- 1Sign in as an owner or admin, then open Settings → API keys.
- 2Create a key with only the scopes it needs, and copy it. It is shown once.
- 3Save it as WAAUTO_API_KEY, then run the examples.
curl https://waauto.qd.je/api/v1/me \
-H "Authorization: Bearer $WAAUTO_API_KEY"{
"data": {
"account": { "id": "…", "name": "Acme Inc" },
"key": { "id": "…", "scopes": ["messages:send"] }
}
}Free-form messages only reach a contact within 24 hours of their last message. Outside that window, send a Meta-approved template.
Security
Built to protect your customer conversations
Encrypted credentials
WhatsApp access tokens are stored with AES-256-GCM encryption.
Protected API keys
Keys are stored only as SHA-256 hashes, limited by scope and revocable at any time.
Account isolation
Row-level security in the database keeps each account’s data separate.
Signed webhooks
Every delivery carries an HMAC-SHA256 signature you can verify.
Role-based access
Give owners, admins, agents and viewers only the access they need.
Rate limiting
Each API key is limited to 120 requests per minute.
FAQ
Frequently asked questions
What teams ask before they move their WhatsApp conversations to waauto.
What is waauto?
waauto is a WhatsApp CRM for teams. It brings a shared WhatsApp inbox, contacts, sales pipelines, broadcasts, no-code automations, chatbot flows and AI replies together in one place, and connects WhatsApp to your own systems with a REST API and webhooks.
Does waauto use the official WhatsApp Business API?
Yes. waauto connects to your WhatsApp Business number through Meta’s official WhatsApp Business Platform. There are no unofficial apps, browser sessions or phone emulators involved.
Can several people reply from the same WhatsApp number?
Yes. Your whole team works one WhatsApp Business number from a shared inbox. Conversations can be assigned, given a status and annotated with internal notes, and every team member has a role: owner, admin, agent or viewer.
Can I send bulk WhatsApp messages and broadcasts?
Yes. Broadcasts send Meta-approved message templates to the contacts you choose, and waauto tracks delivery and reads for every recipient.
Can I automate WhatsApp replies or build a chatbot?
Yes. No-code automations trigger on incoming messages, keywords, new contacts or a schedule, with branches, waits and webhooks. The visual flow builder handles routine conversations and hands off to a person when needed, and AI replies draft answers from your own knowledge base with your OpenAI or Anthropic key.
Does waauto have an API for developers?
Yes. A REST API lets your own applications send messages, sync contacts and add webhooks. API keys are scoped, revocable and limited to 120 requests per minute, and every webhook delivery is signed with HMAC-SHA256.
Why can’t I send a free-form WhatsApp message to some contacts?
WhatsApp only allows free-form messages within 24 hours of the customer’s last message. Outside that window, start the conversation again with a Meta-approved template.
How does waauto keep customer data secure?
WhatsApp access tokens are encrypted with AES-256-GCM, API keys are stored only as SHA-256 hashes, row-level security in the database keeps each account’s data separate, and role-based access limits what each team member can see and do.
How do I get started with waauto?
Create your account and invite your team, connect your WhatsApp Business number from Settings, then import your contacts, set up automations and start replying together from one inbox.
Who is the founder of waauto?
waauto was founded by Mallesh Pareet. Mallesh Pareet is also the founder of httply, an API testing tool.
Bring your WhatsApp conversations together
Create your account and connect your number.