Query a documented WhatsApp Graph resource

Required scope is full, or an admin/owner dashboard session. Although this HTTP route uses POST to accept structured filters, it only dispatches provider GET operations. Select the connected local account by UUID; resourceId is a numeric Meta ID for child resources. Parameters are validated against the selected operation. Arbitrary Graph paths, field expressions, credentials and foreign resources are rejected. Paged results expose data and pagination cursors; submit after/before in parameters to continue on the same endpoint.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Path parameters

accountIdstringRequiredformat: "uuid"

Local connected-account UUID belonging to the authenticated workspace.

operationstringRequiredformat: "^[a-z_]+\.[a-z_]+$"<=100 characters

Exact operation key returned by the capabilities catalog, such as waba.read or template.update.

Request

This endpoint expects an object.

resourceIdstringOptionalformat: "^\d{3,32}$"

Meta child-node ID. WABA operations derive the WABA ID from the connected local account.

parametersmap from strings to anyOptionalDefaults to {}

Operation-specific fields validated against the capability catalog. Maximum serialized size is 256000 bytes.

Response

Provider result wrapped in data, with graphVersion and operation.

datamap from strings to anyOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

422

Unprocessable Entity Error

429

Too Many Requests Error

502

Bad Gateway Error