Move an integration from test to live

Finish the sandbox checks

Use a test key or mode=test OAuth connection. Verify delivery, failure, reply and STOP cases, webhook signature checks, duplicate handling and safe retries. Check /me reports livemode: false.

Activate live access

A workspace owner or admin activates live API access in the developer dashboard and completes the identity check. Key creation defaults to test mode. Once live access is enabled, create a live key with only the scopes your integration needs, or authorize a separate mode=live OAuth connection. Live reads do not require a WhatsApp connection.

Prepare real messaging

Connect your workspace's WhatsApp account. Select an approved template and its exact language. Use a recipient who opted in, or a requested authentication OTP for its specific purpose. Configure a live webhook endpoint and store its signing secret separately from your test receiver.

Check GET /messages/eligibility?to=PHONE_OR_SUBSCRIBER_ID before offering free text. It reports the last inbound message, window expiry and current free-text eligibility. This is a snapshot; Buddy checks policy again at send time.

Verify one controlled send

Send to your own opted-in phone first with a unique idempotency key. Follow the message through acceptance, delivery and webhook processing. Confirm request logs, monitoring alerts and your opt-out handling before increasing traffic. Keep a way to stop your own job queue and revoke credentials.