Evaluation guide

Open-source WhatsApp shared inbox: what to look for

A checklist for evaluating an open-source WhatsApp shared inbox, covering team access, licensing, deployment, backups, and connection risks.

An open-source WhatsApp shared inbox gives your team the option to inspect the code and run the application itself. That can be useful when customer conversations must stay in your infrastructure or when you do not want hosting to depend on one vendor.

Access to source code is only the beginning. Before choosing a project, check whether it supports actual team work and whether your team can operate everything around it.

Start with the team workflow

A repository can connect to WhatsApp without being a shared inbox. For several people to handle customers together, look for:

  • a separate account for each teammate
  • assignments or another visible form of ownership
  • internal notes for handoffs
  • roles and permissions for sending, administration, and exports
  • durable conversation history
  • search, labels, or another way to find older work

Try these features with two users. Assign a conversation to one person, sign in as the other, and check what each account can see and change.

Read the license

“Available on GitHub” does not always mean open source. Check the application license and the licenses of important dependencies.

WATeamInbox’s application code is MIT-licensed. Its whatsmeow dependency is licensed separately under MPL-2.0; the repository documents that distinction.

If you plan to modify the software, use it internally, or offer it as part of another service, ask someone familiar with your organisation’s licensing requirements to review the terms.

Understand what you will need to run

A team inbox usually includes more than a web page. Identify each service before estimating the work:

  • web application and API
  • database
  • WhatsApp connection workers
  • realtime messaging services
  • search
  • object storage for images, documents, and voice messages
  • TLS proxy or load balancer

WATeamInbox publishes a development setup and a single-host production baseline. The self-hosting docs list the current components and configuration.

Check the operational documentation

Look beyond the installation command. Useful documentation should cover:

  • environment variables and secret handling
  • database migrations
  • HTTPS and network exposure
  • backup and restore
  • object storage
  • logging and monitoring
  • upgrades and rollback

A project may be suitable for testing while still requiring more work before production use. Decide who will own that work before connecting an important business number.

Test permissions, not just the happy path

Create accounts with different roles and verify the restrictions yourself:

  • Can an agent connect or remove a WhatsApp number?
  • Can they view every conversation or only assigned work?
  • Who can send messages?
  • Who can export customer data?
  • What happens to access when a teammate leaves?

Document the permissions your team intends to use. Defaults are not a substitute for an access policy.

Plan for media and backups

Text messages are only part of a customer inbox. Images, documents, and voice messages can become the largest part of storage and backups.

Confirm where media is stored, how access is authorised, and whether a database restore still points to the correct objects. Test a restore on a clean machine instead of assuming a successful backup log is enough.

Ask how WhatsApp connects

WATeamInbox uses an unofficial WhatsApp client library. This means WhatsApp changes can affect pairing, message sync, or delivery, and account restrictions are possible. WATeamInbox is independent and is not affiliated with WhatsApp or Meta.

No deployment setting can remove that platform risk. If your organisation requires an official WhatsApp Business Platform integration, choose a product built for that requirement.

Compare self-hosting with managed Cloud

Self-hosting gives you control over the application environment and data location. It also gives you responsibility for patching, backups, monitoring, and recovery.

A managed service removes much of that day-to-day infrastructure work but gives the operator more responsibility for the runtime. WATeamInbox offers both choices: the public repository for self-hosting and WATeamInbox Cloud for managed hosting.

A short evaluation plan

  1. Read the license and architecture documentation.
  2. Run the application with a non-critical WhatsApp number.
  3. Invite two teammates with different roles.
  4. Test assignment, notes, media, and exports.
  5. Stop a service and confirm you understand recovery.
  6. Back up the data and restore it on a clean system.
  7. Write down who will maintain the deployment.

That exercise will reveal more than GitHub stars or a long feature list. If WATeamInbox fits your requirements, continue with the installation and production documentation.

Questions? Message usWhatsApp · +65 8404 2683