WhatsApp Web Setup (Personal Number)

Connect your agent to a personal WhatsApp number through the Baileys sidecar, which pairs to WhatsApp Web by QR code. For an official business number, use the WhatsApp Cloud API instead.

The sidecar drives a personal WhatsApp session. Use a number you control and understand that WhatsApp’s terms restrict automated use of personal accounts.

What You Need

The Baileys sidecar must be running and reachable from Lenno. Gather:

  • Sidecar URL – the base URL of the running Baileys sidecar.
  • Session ID – the sidecar session that holds this number’s paired credentials.
  • Webhook secret – required at runtime for authenticated inbound delivery. If you omit it when creating the channel, Lenno generates a strong secret automatically and passes it to the sidecar. The sidecar signs every inbound delivery with that secret; Lenno rejects missing or invalid signatures.

Connecting to Lenno

  1. Go to your agent’s Channels tab.
  2. Click Add Channel and select WhatsApp Web.
  3. Enter the Sidecar URL and Session ID.
  4. Click Save.

Device Pairing (WhatsApp QR)

  1. Start (or open) the session on the sidecar and scan the QR code with the phone’s WhatsApp > Linked devices.
  2. Once linked, the session stays paired until you remove the linked device.

This QR flow pairs the phone with the sidecar’s WhatsApp Web device session. It does not prove which human is the Lenno agent owner and does not grant owner authority.

Lenno Owner Pairing Is Not Available

WhatsApp Web owner authority is intentionally disabled. The Baileys sidecar currently runs in the same agent container and uses a secret available inside that container. Its signed payload can authenticate delivery from the sidecar, but it is not an independent proof against a root-capable process in the same container. Lenno therefore does not issue or redeem owner-pairing codes for WhatsApp Web.

Scanning a QR code, declaring an owner number, adding a sender to an allowlist, or presenting an old /pair code never grants owner authority. Owner pairing can be enabled only after the sidecar moves into a separately trusted boundary whose identity claims the agent container cannot forge.

Sender Controls

  • Allowed senders and allow groups admit conversations only with restricted, non-owner trust. Everyone else is ignored.
  • WhatsApp Web never treats a sender as the owner in the current architecture; restricted senders cannot run owner commands or approve gated actions.

Tips

  • The sidecar binds to loopback by design – run it alongside Lenno or over a trusted network, never exposed publicly.
  • If the phone unlinks the device, re-pair by scanning a fresh QR code; the session credentials in the sidecar are what keep the channel alive.