Social Media (Messaging & Publishing)

WhatsMax integrates social networks in two ways:

  1. Inbox channels — Facebook Messenger and Instagram DM conversations flow into the shared inbox.
  2. Publishing — the social planner posts to Facebook, Instagram, LinkedIn, TikTok, X (Twitter) and YouTube.

Both use OAuth apps that you (the platform owner) create once per network in Admin → Configuration → Integrations. Your workspace users then just click "Connect" and authorize — they never handle API keys.

Admin integrationsAdmin → Integrations — one OAuth app per network, shared by all workspaces.

General OAuth pattern

Every network follows the same recipe:

  1. Create a developer app on the network's developer portal.
  2. Enter its Client/App ID and Client/App Secret in Admin → Integrations.
  3. Register the redirect URL that WhatsMax displays next to those fields in the network's app settings.
  4. Workspace users connect their accounts in Social Media → Social Accounts (publishing) or Inbox → Channel Setup (Messenger/Instagram inbox).

Facebook & Instagram (Meta)

One Meta app covers Messenger inbox, Instagram DM inbox, Facebook Page publishing and Instagram publishing.

  1. Use the same Business-type Meta app as your WhatsApp setup or create a dedicated one.
  2. Add the Facebook Login for Business and Messenger products; for Instagram add Instagram Graph API.
  3. Permissions to request: pages_show_list, pages_manage_posts, pages_messaging, pages_read_engagement, instagram_basic, instagram_content_publish, instagram_manage_messages.
  4. Messenger/Instagram inbound messages use the Meta webhook: https://your-domain/api/webhooks/meta/{token} — the exact URL and verify token are shown during channel setup.
  5. Instagram publishing requires the Instagram account to be a Business/Creator account linked to a Facebook Page.

App Review

While the Meta app is in Development mode, only users with a role on the app can connect. Before selling to real customers, submit the app for App Review with the permissions above and switch it to Live mode.

LinkedIn

  1. Create an app at linkedin.com/developers.
  2. Add the Share on LinkedIn and Sign In with LinkedIn using OpenID Connect products (plus Community Management API for organization pages).
  3. Copy Client ID/Secret into Admin → Integrations, register the redirect URL.

TikTok

  1. Create an app at developers.tiktok.com.
  2. Add the Content Posting API product and request video.publish scope.
  3. TikTok requires app review before public posting; sandbox mode works for your own test account meanwhile.

X (Twitter)

  1. Create a project + app at developer.x.com (paid API tiers apply for meaningful posting volume).
  2. Enable OAuth 2.0 with tweet.read, tweet.write, users.read, offline.access scopes.
  3. Enter the Client ID/Secret in Admin → Integrations.

YouTube

  1. Create a project in Google Cloud Console, enable the YouTube Data API v3.
  2. Configure the OAuth consent screen (external), add the youtube.upload scope.
  3. Create OAuth client credentials (Web application) with the WhatsMax redirect URL, and enter them in Admin → Integrations.
  4. Google verification is required to lift the 100-user cap on unverified apps.

Connecting accounts (workspace side)

Users go to Social Media → Social Accounts → Connect, pick the network, and complete the OAuth popup. Connected pages/profiles then appear as publishing targets in the social planner.

Social accountsWorkspace view — connected social profiles.