Integrations
Nexus connects to external services via webhooks, REST APIs, and OAuth flows. Each integration is configured per organization.
Integration model
| Component | Description |
|---|---|
| Credential | Stored securely per org. Contains API keys, tokens, and connection metadata. Never exposed in public docs or APIs. |
| Webhook | An HTTP endpoint (Edge Function) that receives events from external services. |
| Sync job | A periodic or event-driven process that pulls or pushes data to/from an external service. |
Supported integrations
WhatsApp Business API
- Credential:
whatsapp_credentialstable (phone number ID, WABA ID, access token). - Inbound:
whatsapp-webhookreceives incoming messages. - Outbound:
whatsapp-send-message,whatsapp-send-template,whatsapp-send-reaction. - Setup: OAuth-based embedded signup flow via
wa-es-callback.
Meta (Facebook & Instagram)
- Facebook Pages: Post management, comment monitoring, Messenger integration.
- Instagram: DM handling, post insights.
- Inbound:
facebook-webhook,instagram-webhook. - Outbound:
facebook-send-message,instagram-send-message. - Auth: Facebook OAuth with page-level permissions.
Shopify
- Sync: Orders, customers, products, and fulfillment status.
- Inbound:
shopify-webhookreceives order/customer events. - Outbound:
shopify-fulfillupdates fulfillment status,shopify-order-updatepushes order changes. - Auth: Shopify Admin API key or OAuth app.
Couriers (Bosta, etc.)
- AWB creation:
create-awb-bostacreates shipments via courier API. - Tracking:
tracking-webhookreceives status updates. - Labels:
print-awbgenerates printable shipping labels.
Issabel PBX (VoIP)
- CDR sync:
pbx-cdr-syncpulls call records from PBX. - Click-to-call:
call-initiatetriggers outbound calls. - Extensions:
pbx-extensionsmanages user-to-extension mappings.
Odoo
- Order read:
odoo-order-readpulls order data from Odoo ERP.
n8n (Workflow Automation)
- Nexus uses n8n as an external automation engine for complex multi-step workflows.
- Webhooks from n8n trigger Edge Functions; Edge Functions call n8n webhook endpoints.
TikTok
- Inbound:
tiktok-webhookreceives events from TikTok.
Credential security
Integration credentials (API keys, access tokens, refresh tokens) are:
- Stored encrypted in the database.
- Scoped to a single organization via RLS.
- Never included in public API responses.
- Never logged or exposed in documentation examples.