Configure and verify webhooks

Create an endpoint

1. Open “Account → API”.
2. Enter a public HTTPS URL on port 443.
3. Optionally restrict it to one team.
4. Create the endpoint and save the secret shown once.

Verify delivery

Verify HMAC-SHA256 over the timestamp and unchanged request body. Accept only a short clock difference and store the event ID to prevent duplicate processing. Delivery is at least once and order is not guaranteed.

Failed deliveries are retried. Payloads and complete signature verification are documented in the API reference.