Glossary
API key
A credential your own systems use to call a platform's API. Scoped keys grant only the permissions a specific integration needs.
One term from the WhatsApp Business Platform glossary. Last updated 2026-07-25.
A key that can do everything is a liability, because any system holding it inherits full account access. Scoped keys limit an integration to the specific operations it needs — read contacts, send messages, nothing else.
Keys should be rotatable without downtime and revocable individually, so a compromised integration can be cut off without breaking every other system at the same time.
Related terms
- SSO
- Single sign-on — letting staff log into a platform with the company identity provider they already use, rather than a separate username and password.
- Webhook
- An HTTP callback Meta sends to your platform whenever something happens on your WhatsApp number — an inbound message, a delivery status change, or a template approval decision.
- RBAC
- Role-based access control — granting permissions by job role rather than individually, so an agent, a manager and an owner see different parts of a platform.
See API key in a real workspace
BotPulsar runs the official WhatsApp Business Platform with unlimited team members on every plan, starting at ₹300/month.