API key visibility
The key secret is shown once when the key is created. Store it immediately. After creation, the dashboard shows only public metadata such as the key ID, prefix, scopes, connection IDs, creation time, and revocation state.Scopes
The backend checks scopes at the public API edge.| Scope | Use it for |
|---|---|
whatsapp:read | Status, sync, conversations, contacts, messages, media, command status, and MCP WhatsApp read grants. |
whatsapp:write | Pairing, sends, reactions, edits, deletes, read receipts, groups, unlink, and command enqueue. |
webhooks:manage | Webhook endpoints and delivery history. |