Steps
Create your endpoint URL
Your endpoint must be a publicly accessible HTTPS URL that returns a
2xx status code within 10 seconds of receiving a request. If your server takes longer to process, acknowledge the webhook immediately and handle processing asynchronously.Most webhook receiver frameworks (for example, ngrok for local testing, or cloud functions for production) provide HTTPS URLs automatically.Register the endpoint
- Go to Integrations → Webhooks → Add endpoint.
- Enter your HTTPS URL.
- Add an optional description to remind yourself what this endpoint is for.
- Click Create.
Select events
After creating the endpoint, open it and click Add events. Choose the event types you want this endpoint to receive. You can subscribe to all events or select individual types.See event types for the full list and payload schemas.
Verify the signature header
Every webhook request includes an Your endpoint secret is shown once at creation time—save it securely.
X-Signature-256 header containing an HMAC-SHA256 signature of the request body, signed with your endpoint’s secret key.Verify this header in your receiver before processing the payload: