Outbound Webhooks

​

Add a webhook

1. Enter an Endpoint URL. It must be https://.
2. Leave All events (*) on, or turn it off and choose specific events.
3. Click Create webhook, then reveal and copy its Secret. It is shown once.

​

Events

• message.classified fires once a reply has been read and given an intent (interested, question, not_now, not_interested, ooo, wrong_person, unclear). This is the one to use for “new interested reply”.
• sequence.stalled and sender.running_dry are the alerts. sequence.recovered fires when a stall clears.
• meeting.booked carries lead_id, sender_id, provider, starts_at and booking_id.
• sequence.webhook is sent by the Call webhook step inside a sequence.

​

Verifying requests

x-signature    hex HMAC-SHA256 of the raw body, keyed with your secret
x-event        the event name
x-delivery-id  a unique id for this delivery attempt

import crypto from "node:crypto";

// rawBody must be the exact bytes we sent, before any JSON parsing
function isValid(rawBody, signatureHeader, secret) {
  const expected = crypto.createHmac("sha256", secret).update(rawBody).digest("hex");
  const a = Buffer.from(expected), b = Buffer.from(signatureHeader || "");
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

import hmac, hashlib

def is_valid(raw_body: bytes, signature_header: str, secret: str) -> bool:
    expected = hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature_header or "")

​

Retries and failures

• Answer with a 2xx within 10 seconds.
• A failed delivery is retried up to 5 times, with the wait doubling each time (about 2, 4, 8, then 16 minutes).
• A webhook is switched off automatically after 50 failures in a row. Turn it back on from the list; this resets the failure count.
• Recent deliveries shows the last 100 attempts with status code, attempts and last error. Records are kept for 30 days.

​

Replay a delivery

curl "$BASE/webhooks/deliveries?limit=20" -H "Authorization: Bearer $KEY"
curl -X POST "$BASE/webhooks/deliveries/48211/replay" -H "Authorization: Bearer $KEY"

​

Related articles

• Webhook Troubleshooting and Common Issues
• The Public API
• Automation Recipes