Pakai matriks ini pas bikin API key. Kasih akses seminim mungkin.
Model auth
Endpoint yang butuh auth nerima:
X-Api-Key(disarankan buat integrasi server)- Bearer token (buat dashboard / user session)
Permission pakai format resource action, contoh messages:send.
Permission buat integrator
| Domain | Contoh path | Permission yang biasa dipakai |
|---|---|---|
| Messages | /v1/messages* |
messages:send, messages:read |
| Channels | /v1/channels* |
channels:read, channels:write |
| Contacts | /v1/contacts* |
contacts:read, contacts:write |
| Templates | /v1/templates* |
templates:read, templates:write |
| Media | /v1/media/*, /v1/messages/uploads/* |
messages:send |
| Developer webhooks | /v1/settings/developer/webhooks* |
Butuh akses org settings (atur di dashboard) |
| WABA | /v1/waba* |
waba:read, waba:write |
| API keys | /v1/api-keys* |
api_keys:read, api_keys:write |
Role di aplikasi
- Member — urusan harian: kirim pesan dan kelola kontak.
- Admin — semua yang Member bisa, plus kelola API key, invitation, dan aksi destruktif.
- Owner — semua yang Admin bisa, plus aksi level organization.