Changelog

Friendly Aliases for WABAs and Phone Numbers

This cycle introduces custom aliases for WhatsApp phone numbers and business accounts, rich media template previews inside the conversation inbox, and secure delegated onboarding via guest setup links.

Friendly Aliases for WABAs and Phone Numbers

Managing multiple Meta identifiers can be confusing when editing templates, filtering lists, or selecting outbound numbers. You can now define custom, user-friendly aliases (nicknames) for both your WhatsApp Business Accounts (WABAs) and specific phone numbers directly within Peach.

Editable Nicknames: Assign aliases on the phone numbers settings page.

Auto-generated Defaults: Peach automatically fetches Meta display names during onboarding and sets up unique nickname defaults. If duplicate display names exist, Peach appends unique suffixes (Name 1, Name 2).

UI Integration: Aliases are displayed across the template creation dropdown, template metadata badges, and the template listing and filter views, using the format Nickname (Meta ID) where disambiguation is helpful.

Delegated Onboarding via Guest Setup Links

Teams can now invite external members—such as marketing administrators or agency partners—to complete WhatsApp onboarding on their behalf without giving them a full Peach login or direct Meta Business Manager credentials.

Secure Guest Flows: Authenticated Peach users can generate signed guest onboarding links on the setup page.

UI Controls: Generate, expire, or regenerate links directly within the onboarding interface.

Token Rotation & Automated Rotation: Regenerating a guest setup link rotates the secure token in place, instantly invalidating the previous URL. This includes background cron job support to rotate active guest links periodically.

Platform & Developer Enhancements

Codex MCP OAuth Specification: Hardened the Model Context Protocol (MCP) and API authentication layer by adding full OAuth 2.0 PKCE compliance.

Security Enhancements: Added standard protected-resource metadata discovery headers (WWW-Authenticate), migrated token storage to use secure cryptographic digests instead of storing raw access and refresh tokens, and preserved full backward compatibility for existing API keys and Shopify webhook authentication paths.

Lenient Messaging API & MCP Filters: Updated the List Messages API and the peach_list_messages MCP tool to allow targeting and retrieval of specific messages.

Filter Support: Added support for filtering by conversation_id, contact phone_number, and business_phone_number. Implemented lenient parsing for contact phone numbers; local formats are automatically normalized using the account's default country code.

Bug Fixes & Small Improvements

  • Media Header Previews: Renders inline images, video players, and download cards for PDF/file attachments inside the conversation inbox bubble to let agents preview sent campaign media at a glance.
  • Active Call-Permission Gating: Normalized WhatsApp call permissions to treat permanent permissions (without expiration timestamps) as active, and resolved issues where stale local snapshots incorrectly marked callable users as blocked by triggering an on-demand refresh from Meta.
  • Template Inbox Crash Hardening: Resolved production crashes in the conversation view when loading templates containing plain-string media paths or unresolved media references.
  • Onboarding & Redirect Enhancements: Onboarding chats now identify returning subscribers by their authenticated phone numbers to prevent duplicate subscriber creation, and redirects are aligned to route users through the home route for consistent setup checks.

Updates

See what else we shipped.