Publishable keys are limited-access keys intended for controlled environments where exposing full API credentials is not safe. They provide access to only non-sensitive operations and cannot be used for sending WhatsApp messages or managing sessions.

When to Use Publishable Keys

Use publishable keys for:

• Client-side integrations with limited scope
• Public widgets or controlled plugins
• Non-sensitive read-only endpoints

When Not to Use Publishable Keys

Do not use publishable keys for:

• Sending or receiving WhatsApp messages
• Webhook setup
• WhatsApp session management

All messaging operations must always be performed using secure server-side API keys.