Download the PHP package gabrielesbaiz/whatsapp-toolkit without Composer

WhatsappToolkit

Click-to-chat links for Laravel — wa.me/393331234567?text=Hi%20%2ASarah%2A rather than a URL that opens WhatsApp and no conversation — with formatting, QR codes and Cloud API sending on top.

📖 Read the documentation →

Every config key, the whole API, the Cloud API and its error codes, recipes for the things that actually come up, and the errors you will hit with what each one means.

[!CAUTION] Upgrading from 1.x? Read UPGRADE.md first. Phone numbers are now normalised rather than url-encoded, format() no longer returns encoded text, and the default link is wa.me. url() keeps its signature — but every link it produces is different, because the old ones opened a chat with nobody.

[!IMPORTANT] A ⭐ costs you nothing and helps other developers find this package. Sponsoring keeps it compatible with every new Laravel release.

What it does

WhatsApp publishes the click-to-chat URL format, and it is two lines of string concatenation. If your phone column already holds digits, your message is already plain text, and nobody will ever paste rich text into it, write those two lines and move on. This package is what those three assumptions cost when they turn out to be false:

• Phone normalisation to the digits WhatsApp dials — punctuation, 00 prefixes and trunk zeros gone, a configurable country code applied, E.164 out.
• HTML and Markdown to WhatsApp markup, with entities decoded, ordered lists renumbered and link destinations kept — returned as plain text, so the same body also feeds a real send.
• A Blade component, a validation rule, an Eloquent cast and Str macros, so the correct thing is the short thing to write.
• QR codes for the chat link, and five link flavours including the native deep link and business short links.
• Cloud API sending — messages, templates, media, interactive buttons — with a notification channel, a fake for your tests, and a signature-verified inbound webhook.

The sending half stays completely dormant until you configure it: no routes, no credential reads, nothing. Most applications install this for the links alone, and it costs them nothing beyond Laravel to do so.

Requirements

• PHP 8.3+
• Laravel 11, 12 or 13
• A Meta WhatsApp Business account — only if you want to send

Installation

The service provider is auto-discovered and there is nothing to register: no migrations, no tables, no assets. Publishing is optional — the one setting worth putting in .env straight away is WHATSAPP_COUNTRY_CODE, so local numbers reach the right country.

Full installation guide →

Artisan commands

See the commands page.

Documentation

Testing

CI runs the first three on PHP 8.3 and 8.4 against Laravel 11 and 12, at both lowest and stable dependencies.

Contributing

Thank you for considering contributing. The guide is in CONTRIBUTING.md.

Security vulnerabilities

Please review SECURITY.md for reporting a vulnerability. Please do not open a public issue.

Credits

Written and maintained by Gabriele Sbaiz.

This package builds on Laravel, spatie/laravel-package-tools, and — when you ask for a QR code — bacon/bacon-qr-code.

Support this package

If it is useful to you:

• ⭐ Star the repo. Free, thirty seconds, and it is the first signal other developers look at.
• ❤️ Become a sponsor. From $5 a month.
• 🐛 Open a good issue. A phone format that normalises wrong, with the input, is worth more than you think.
• 🗣️ Tell another Laravel developer. Word of mouth is how packages survive.

Disclaimer

This package is provided as is, without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, title and non-infringement. To the fullest extent permitted by applicable law, in no event shall the authors, copyright holders or contributors be liable for any claim, damages or other liability — whether in an action of contract, tort or otherwise — arising from, out of or in connection with this package or its use, including without limitation any direct, indirect, incidental, special, exemplary, consequential or punitive damages, loss of data, loss of profits, business interruption, or messages delivered to the wrong recipient.

It builds links and formats text; it cannot tell you whether a number belongs to the person you think it does, or whether it has WhatsApp at all. A click-to-chat link is public by construction — anything prefilled into one travels in a URL and may appear in browser history and server logs, so do not prefill a secret. The Cloud API half depends entirely on Meta's platform: its rate limits, template approvals, 24-hour messaging window and error codes are theirs, not this package's, and they change without notice. Whoever deploys this is responsible for what is sent, to whom, and with what consent — including meeting whatever regulatory, contractual or messaging-policy obligations apply to them, and reviewing the code before putting it in front of a customer conversation. Nothing here constitutes security, legal or compliance advice.

Use of this package is entirely at your own risk.

License

MIT. See LICENSE.md. The MIT licence's warranty disclaimer and limitation of liability apply in full, alongside the disclaimer above.