Skip to main content
POST
/
v1
/
clients
curl -X POST https://api.whatabot.app/api/v1/clients \
  -H "X-Api-Key: wh_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"name": "My SaaS Embed", "workspaceId": "workspace-uuid"}'

{
  "clientId": "wb_client_abc123",
  "clientSecret": "wb_secret_xyz789",
  "name": "My SaaS Embed"
}
OAuth Clients are credentials for iframe embedding. They provide a clientId and clientSecret pair that your backend uses to authenticate and embed the WhataBot flow editor inside your own application via iframe. Each client is scoped to a single Workspace, so the embedded editor can only access flows and sectors within that workspace. See the full Embed guide and Embed Authentication for details.
​
X-Api-Key
string
required
Your API key (prefixed with wh_).

​
Body

​
name
string
required
Client display name.
​
workspaceId
string
required
Workspace UUID.

​
Payload examples

{
  "name": "My SaaS Embed",
  "workspaceId": "550e8400-e29b-41d4-a716-446655440000"
}

curl -X POST https://api.whatabot.app/api/v1/clients \
  -H "X-Api-Key: wh_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"name": "My SaaS Embed", "workspaceId": "workspace-uuid"}'

{
  "clientId": "wb_client_abc123",
  "clientSecret": "wb_secret_xyz789",
  "name": "My SaaS Embed"
}
The clientSecret is only returned once at creation time. Store it securely.