2026.4.3
BayramAnnakov/ux-waiting-audit2026.4.3May 7, 2026by devlikepro
AI Summary
Waha 2026.4.3 focuses on security improvements including session key scopes and query parameter authentication, alongside bug fixes for GOWS and NOWEB engines.
Key Highlights
- Added Session Key Scopes for read/send permissions.
- Support for ?x-api-key query parameter authentication.
- Added GET /api/{session}/new-message-id endpoint.
- Fixes for GOWS tctoken lifecycle and NOWEB missing Facebook/Instagram ADs messages.
New Features
- Session Key Scopes
- Query Parameter Authentication
- New Message ID API
- MCP Support
- Engine Updates
Full Release Notes
š **New**
- `2026.4.3` - [**š§© MCP**](https://waha.devlike.pro/docs/apps/mcp/) - [#1925](https://github.com/devlikeapro/waha/issues/1925)
- `2026.4.3` - **API Key** - [**š Session Key Scopes**](https://waha.devlike.pro/docs/how-to/security/#session-key-scopes) (read/send/etc) - [#2035](https://github.com/devlikeapro/waha/issues/2035)
- `2026.4.3` - **API** - `GET /api/{session}/new-message-id` - generate message ID before sending
- `2026.4.3` - **NOWEB**, **GOWS** - Provide message ID in send request - [#2054](https://github.com/devlikeapro/waha/issues/2054)
- `2026.4.3` - **Auth** - [**š Use `?x-api-key` query parameter**](https://waha.devlike.pro/docs/how-to/security/#use-x-api-key-query-parameter) for authentication
**š§© Apps**
- `2026.4.3` - [**š§© MCP**](https://waha.devlike.pro/docs/apps/mcp/) - [#1925](https://github.com/devlikeapro/waha/issues/1925)
š ļø **Fixes**
- `2026.4.3` - **GOWS** - Add tctoken lifecycle - fix #2050
- `2026.4.3` - **NOWEB** - Fix missing Facebook and Instagram ADs messages - fix #1922
- `2026.4.3` - **GOWS** - Fix "Sessions take a long time to start after server restart" - fix #2012
- `2026.4.3` - **GOWS** - Fix 403 on some media download - use re-upload request from the phone for this - fix #2049
āļø **Updates**
- `2026.4.3` - **NOWEB** - up engine
- `2026.4.3` - **GOWS** - up engine
**Full Changelog**: https://github.com/devlikeapro/waha/compare/2026.4.2...2026.4.3