Meta Agency Requirements
Use this page as the official readiness checklist before connecting client companies to Ads Web Lab WhatsApp Cloud API.
1. Ads Web Lab Meta Business Portfolio:
The agency business portfolio should be created with accurate business name, website, support email, phone number and address. Business verification should be completed before onboarding external customers at scale.
2. Meta Developer App:
Create a Business type Meta App for Ads Web Lab. Add WhatsApp, Webhooks and Facebook Login for Business. Keep the App ID, App Secret and Embedded Signup Configuration ID saved inside Super Admin settings.
3. Required URLs:
Add the production domain in App Domains and JavaScript SDK domains. Add valid Privacy Policy, Terms & Conditions, Disclaimer, Refund Policy and Data Deletion URLs. Webhook callback URL should point to /webhooks/meta/whatsapp.
4. Required Permissions:
Request Advanced Access for whatsapp_business_management and whatsapp_business_messaging. Use App Review notes explaining that Ads Web Lab customers connect their own Business Portfolio, WABA and phone number through Embedded Signup.
5. Embedded Signup:
Create a WhatsApp Embedded Signup configuration in Meta. The client will login from Ads Web Lab, click Connect with Facebook, select/create Business Portfolio, select/create WABA, add or select phone number and complete OTP verification.
6. Client Business Documents:
Client can upload internal review documents in Ads Web Lab Company Documents. Official Meta business verification documents must be submitted directly in Meta Business Suite / Security Centre by the business owner.
7. Webhooks:
Meta webhook should subscribe to messages, message_template_status_update, message_template_quality_update, phone_number_name_update, phone_number_quality_update, account_update and security events. Ads Web Lab maps each webhook event by phone_number_id to the correct client company.
8. Client Own API and CRM Webhook:
Every client company can generate its own Ads Web Lab API token and set its own outbound CRM webhook. API tokens and webhook events are tenant isolated and cannot access another company's data.
9. Compliance Checklist:
Clients must collect opt-in before sending messages, use approved templates outside the 24-hour service window, follow WhatsApp Commerce and Business policies, avoid spam, keep quality rating healthy and respond to customer requests.
10. Go-Live Checklist:
Business verified, app live, permissions approved, Embedded Signup configuration active, webhook verified, legal pages published, test client connected, test template synced, test message delivered and wallet/payment settings configured.