Run a WhatsApp sender profile action
Actions: sync (push the business profile; local logo_url is uploaded when profile_picture_handle is omitted), refresh (pull the business profile), test_read_receipts_webhook, or rotate_read_receipts_webhook_secret. Rotation invalidates the previous secret immediately and returns the new signing_secret exactly once. Existing secrets cannot be retrieved. Banner stays local-only. Required scope: assistants:write.
Authorizations
API key (fam_..., created under Settings → API Keys) or an OAuth 2.0 access token (fam_at_...). Keys can be restricted to scopes such as assistants:read, calls:write, campaigns:write, automations:read, dashboards:read, dashboards:write, leads:write, segments:write, loop:read, loop:write, phone_numbers:write, sip_trunks:write, knowledge:write, voices:read, billing:read, settings:write, platform:read, platform:write; a *:write scope implies the matching *:read. Automation and dashboard endpoints also accept the legacy calls:* scope. Keys without scope restrictions have full access.
Path Parameters
Body
Response
Action result. Secret rotation returns data.signing_secret exactly once.