Description
MCOD Cloud API Chat CRM turns your WordPress installation into a complete CRM system to manage WhatsApp Cloud API conversations directly from the admin dashboard.
Main Features (V1):
- Receive messages via Meta Webhook (text, image, audio, document, sticker, video, location).
- Contacts as a Custom Post Type with its own operational MySQL table.
- Conversations with statuses: open and closed.
- Assignment of conversations to agents.
- Send text, image, and audio from the interface.
- Status updates: pending, sent, delivered, read, failed.
- Three-column interface: conversations, chat, contact data.
- Real-time updates via Server-Sent Events (SSE) with recovery polling.
- Transactional persistence and deduplication so no Webhook-confirmed message is lost.
- Webhook signature validation (X-Hub-Signature-256).
- Access Token and App Secret encryption.
- Roles: Administrator (full control) and CRM Agent (chat access without sensitive credentials).
- Error logging and diagnostic panel.
- Compatible with shared hosting and VPS.
PRO Features (via WooCommerce Addon):
- WooCommerce Synchronization: Automatically update contacts when an order is placed.
- Enhanced Checkout: Validates and normalizes phone numbers during checkout (E.164).
- Orders Panel: View recent WooCommerce orders directly in the chat interface.
- Product Search: Send products and links seamlessly from the chat composer.
- Automations: Trigger WhatsApp templates on order status changes or abandoned carts.
- Canned Replies: Quick replies auto-completable with
/in the chat. - Outbound Webhooks: Send data to Make, Zapier, or n8n based on chat events.
Requirements:
- WhatsApp Business account with access to Meta WhatsApp Cloud API.
- Permanent system token (not the temporary token from the developer panel).
- WordPress installed on a server with HTTPS.
Privacy:
This plugin connects to Meta’s WhatsApp Cloud API to receive and send messages. The plugin does not collect or transmit data to its own servers. Messages and contacts are stored solely in your WordPress database. Refer to Meta’s privacy policy at https://www.facebook.com/privacy/policy/.
Installation
- Upload the
mcod-cloud-api-chat-crmfolder to the/wp-content/plugins/directory. - Activate the plugin from the WordPress “Plugins” menu.
- Go to WhatsApp CRM Settings and enter your Meta credentials.
- Copy the Webhook URL and Verify Token and configure them in the Meta panel.
- Subscribe your application to the WABA from the diagnostic panel.
FAQ
-
Does the plugin work with the temporary token from the Meta developer console?
-
No. The temporary token expires in hours. You must create a system user in your Meta Business Portfolio and generate a permanent token with the
whatsapp_business_messagingandwhatsapp_business_managementpermissions. -
Yes. The plugin includes specific configuration for shared hosting that adjusts the behavior of the SSE stream and recovery polling.
-
Can agents see the Access Token?
-
No. The Access Token and App Secret are encrypted before being saved and are never delivered to the browser. Agents with the “CRM Agent” role do not have the
wacrm_view_credentialscapability. -
What happens if the Webhook connection is lost?
-
Messages are persisted in MySQL within a transaction before returning 200 to Meta. If the SSE stream or agent connection is interrupted, the system recovers missing events through incremental polling using a monotonic cursor.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“MCOD Cloud API Chat CRM” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “MCOD Cloud API Chat CRM” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.6
- Prepare plugin base for WordPress repository.
- Fix Plugin Check warnings and errors.
- Translate plugin strings and documentation to English.
1.0.0
- Initial version: plugin skeleton, database (8 MySQL tables), roles and capabilities, Custom Post Types, settings screen with credentials encryption, diagnostic panel.




