Skip to main content

Integrations

Nexus connects to external services via webhooks, REST APIs, and OAuth flows. Each integration is configured per organization.

Integration model

ComponentDescription
CredentialStored securely per org. Contains API keys, tokens, and connection metadata. Never exposed in public docs or APIs.
WebhookAn HTTP endpoint (Edge Function) that receives events from external services.
Sync jobA periodic or event-driven process that pulls or pushes data to/from an external service.

Supported integrations

WhatsApp Business API

  • Credential: whatsapp_credentials table (phone number ID, WABA ID, access token).
  • Inbound: whatsapp-webhook receives incoming messages.
  • Outbound: whatsapp-send-message, whatsapp-send-template, whatsapp-send-reaction.
  • Setup: OAuth-based embedded signup flow via wa-es-callback.

Meta (Facebook & Instagram)

  • Facebook Pages: Post management, comment monitoring, Messenger integration.
  • Instagram: DM handling, post insights.
  • Inbound: facebook-webhook, instagram-webhook.
  • Outbound: facebook-send-message, instagram-send-message.
  • Auth: Facebook OAuth with page-level permissions.

Shopify

  • Sync: Orders, customers, products, and fulfillment status.
  • Inbound: shopify-webhook receives order/customer events.
  • Outbound: shopify-fulfill updates fulfillment status, shopify-order-update pushes order changes.
  • Auth: Shopify Admin API key or OAuth app.

Couriers (Bosta, etc.)

  • AWB creation: create-awb-bosta creates shipments via courier API.
  • Tracking: tracking-webhook receives status updates.
  • Labels: print-awb generates printable shipping labels.

Issabel PBX (VoIP)

  • CDR sync: pbx-cdr-sync pulls call records from PBX.
  • Click-to-call: call-initiate triggers outbound calls.
  • Extensions: pbx-extensions manages user-to-extension mappings.

Odoo

  • Order read: odoo-order-read pulls order data from Odoo ERP.

n8n (Workflow Automation)

  • Nexus uses n8n as an external automation engine for complex multi-step workflows.
  • Webhooks from n8n trigger Edge Functions; Edge Functions call n8n webhook endpoints.

TikTok

  • Inbound: tiktok-webhook receives events from TikTok.

Credential security

Integration credentials (API keys, access tokens, refresh tokens) are:

  • Stored encrypted in the database.
  • Scoped to a single organization via RLS.
  • Never included in public API responses.
  • Never logged or exposed in documentation examples.