Integrations

The Integrations page gathers everything your agent is connected to: platform accounts, developer tools (Public API and Webhooks), and add-on apps such as Whitelister.

Before you start

• The Pro plan for Public API and Webhooks. On the Plus plan, their cards say Available on the Pro plan.
• A publicly reachable HTTPS endpoint, if you want to use Webhooks, such as a webhook node in n8n.
• A connected WhatsApp number, if you want to use Whitelister. See Connect Your Accounts.

1. Open Integrations

In the sidebar, click Integrations. On a phone, open the menu first with the ☰ icon at the top right.

DesktopPhone

1. Platform connections: the Instagram, TikTok, and WhatsApp accounts this agent replies to. Click Manage to open its connection page, see Connect Your Accounts.
2. For developers: Public API and Webhooks to link the agent to n8n, Zapier, or your own system.
3. Apps: add-ons such as Whitelister that control who the agent replies to.

---

Public API (Pro plan)

2. Create an API key

Click the Public API card.

DesktopPhone

1. Create API key: give it a name so you remember where it's used, for example n8n Production, then click Create.
2. The API key list: name, masked key, status, when it was last used, and the creation date. Click the trash icon to delete a key. Apps using that key stop working right away.
3. How to use it: the Base URL (https://public-api.dibales.ai) and the Authentication header (Authorization: Bearer <API key>). Each API key only works for this agent. The endpoint list and request limits are in the API documentation.

DesktopPhone

1. The API key is shown only once. Click Copy, then keep it somewhere safe.
2. Click I have saved it. Once this window closes, the key can't be shown again. If you lose it, delete the key and create a new one.

💡 If the agent is no longer on the Pro plan, every API key is rejected until the agent is upgraded again.

---

Webhooks (Pro plan)

Webhooks send events from Instagram, TikTok, and WhatsApp straight to your URL, for example to log new DMs in Google Sheets or post a notification in Slack.

3. The Webhooks page

Click the Webhooks card.

DesktopPhone

1. Webhook secret and Add webhook (see steps 4 and 5). Below them is a summary of your webhooks, the queue, and the delivery success rate over the last 24 hours.
2. The Webhooks tab lists your webhooks, Delivery log records every event sent, and Event examples shows a sample payload for each event.

DesktopPhone

1. Each webhook card shows its name, status, platforms, and endpoint URL:
   • Send test: sends a test.ping event to the endpoint. Test events aren't added to the Delivery log.
   • Pause / Activate: stops or resumes deliveries to this webhook.
   • Edit and Delete. A deleted webhook stops receiving events and its delivery log is deleted too.

Each delivery is tried up to 5 times, waiting 30 seconds, 2 minutes, 10 minutes, then 1 hour. A webhook that fails 300 times in a row is auto-disabled. Fix the endpoint, then click Activate. Delivery logs are kept for 30 days, and failed deliveries can be sent again with Retry.

---

4. Add a webhook

DesktopPhone

1. Name (optional): for example n8n New Orders.
2. URL: your endpoint address, which must start with https://. When you save, we send a GET request to this URL with the query ?challenge=value. The endpoint must respond with a 2xx status and a body exactly equal to the challenge value.
3. Platforms: turn on the platforms whose events you want to forward.
   • Instagram: DMs, comments, story replies, and mentions.
   • TikTok: DMs and comments.
   • WhatsApp: messages, reactions, read receipts, and account status.

Click Save. Every event from the selected platforms is sent to this URL.

Check the result: click Send test on the webhook card. If it works, you'll see Test sent, the endpoint responded … and the test.ping event reaches your endpoint. Then send a real DM or comment from another account, and check the Delivery log tab.

---

5. Verify events with the webhook secret

Click Webhook secret to make sure incoming events really come from dibales.ai.

DesktopPhone

1. One secret applies to every webhook on this agent. Click Show or Copy to see it, or Regenerate if it leaks. The old secret stops working right away, so update the value in your system too.
2. How to verify events:
   • read the X-Dibales-Timestamp and X-Dibales-Signature headers from the request;
   • join the timestamp, a single dot, and the raw request body, then compute HMAC-SHA256 with this secret as hex;
   • compare the result with the value after v1= in X-Dibales-Signature. Reject the request if they differ or the timestamp is older than 5 minutes.

---

Whitelister

Whitelister makes the agent reply only to WhatsApp numbers on a list, for example when your WhatsApp number is just for registered customers. Instagram and TikTok aren't filtered. Whitelister only takes effect once WhatsApp is connected.

6. Set up Whitelister

In the Apps section, click Activate (or Configure if it's already on) on the Whitelister card.

DesktopPhone

1. Allowed numbers: fill in the Name and WhatsApp number, then click Add number. The number must match the sender's number exactly, including the country code.
2. Rejection message (optional): sent to numbers that aren't on the list. Leave it empty if those numbers don't need a reply.

Click Save and activate (or Save). To turn it off, click Deactivate on the Whitelister card. The agent replies to every number again, and the list is kept.

Check the result: you'll see Whitelister saved and active. Send a message to the agent's number from a number on the list (it gets a reply as usual) and from a number not on the list (no reply, or the rejection message if you filled it in).

Troubleshooting