WhatsApp Webhook Debugger & API Playground

Webhook Target URL:

/webhook

Filter Event:

Loading callback history...

Send Meta Graph API Test Message

v21.0

Recipient Phone Number (with Country Code)

Must include country code (e.g. 62 for Indonesia). For test sandbox numbers, recipient must be added in Meta Developer console.

Message Type

Text Content

Execution Response

Idle

// Response output will appear here after execution

Configure Meta API Credentials

Stored in memory / KV

Webhook Verify Token (hub.verify_token)

Matching verification secret entered in Meta Developer Webhook settings.

Meta App Secret (for HMAC SHA256 Signature Verification)

Used to verify X-Hub-Signature-256 header sent on incoming Meta callbacks.

Meta Permanent System User Access Token

WhatsApp Phone Number ID

WABA Account ID

Cloudflare & Meta mTLS Header Detection

Mutual TLS

When mTLS is enabled on your Cloudflare zone for Meta Webhooks, Cloudflare validates Meta's client certificate at the TLS layer and injects standard detection headers into incoming worker requests:

cf-client-cert-presented 1 (Presented) / 0 (None)

cf-client-cert-subject-dn CN=Meta Platforms, Inc.

Inspect & Validate X.509 Client PEM Certificate

Paste a Meta client certificate or custom mTLS certificate to inspect subject, issuer, and validity dates.

Paste X.509 PEM Certificate