Overview
Standards-based inbound/outbound webhooks with HMAC signatures for secure automation and third‑party pipelines.
Capabilities
-
Outbound event webhooks: task.created, task.updated, task.completed, task.deleted, task.sla_breached
-
Inbound actions: create/update/complete via signed HTTPS calls
-
Replay protection with timestamped HMAC (±60s window)
-
Per-endpoint secrets, IP allowlists, and retry with backoff
-
Delivery logs and signature validators (examples provided)
Setup Steps (5)
-
1
-
2
-
3
Step 3
Verify incoming signatures using the provided sample code (Node, Python, PHP, Go).
-
4
-
5
Limitations
-
Endpoints must respond within timeout windows; otherwise events are retried then sent to DLQ.
-
Clock skew greater than ±5 minutes can cause signature validation to fail.
FAQs
Do you support custom headers?
Yes. Include required signature headers; additional headers pass through.
Can we fan out to multiple endpoints?
Yes, add multiple subscriptions with independent secrets and filters.
Pricing
Free
Free
Great for trying the integration.
Pro
USD 4.99 / monthly
Business
USD 14.99 / monthly
Enterprise
USD 39.99 / monthly