curl -X POST https://api.whatabot.app/api/v1/clients \
-H "X-Api-Key: wh_your_api_key" \
-H "Content-Type: application/json" \
-d '{"name": "My SaaS Embed"}'
{
"clientId": "wb_client_abc123",
"clientSecret": "wb_secret_xyz789",
"name": "My SaaS Embed"
}
OAuth Clients
Create Client
Create a new OAuth client for iframe embedding.
POST
/
v1
/
clients
curl -X POST https://api.whatabot.app/api/v1/clients \
-H "X-Api-Key: wh_your_api_key" \
-H "Content-Type: application/json" \
-d '{"name": "My SaaS Embed"}'
{
"clientId": "wb_client_abc123",
"clientSecret": "wb_secret_xyz789",
"name": "My SaaS Embed"
}
OAuth Clients are credentials for iframe embedding. They provide a
clientId and clientSecret pair that your backend uses to authenticate and embed the whatabot flow editor inside your own application via iframe.
Each client is scoped to a single Workspace, so the embedded editor can only access flows and sectors within that workspace.
See the full Embed guide and Embed Authentication for details.
string
required
Your API key (prefixed with
wh_).Body
string
required
Client display name.
Payload examples
- Create client
{
"name": "My SaaS Embed"
}
curl -X POST https://api.whatabot.app/api/v1/clients \
-H "X-Api-Key: wh_your_api_key" \
-H "Content-Type: application/json" \
-d '{"name": "My SaaS Embed"}'
{
"clientId": "wb_client_abc123",
"clientSecret": "wb_secret_xyz789",
"name": "My SaaS Embed"
}
The
clientSecret is only returned once at creation time. Store it securely.