Webhooks Guide

Incoming Webhooks

Incoming webhooks let external services trigger your automations by sending HTTP requests. Each automation with a webhook trigger gets a unique endpoint URL that accepts POST requests.

Webhook Security

All webhook endpoints support HMAC signature verification. Include a signature header with your requests and configure the secret in the automation settings.

import hmac
import hashlib

def sign_payload(payload: bytes, secret: str) -> str:
    return hmac.new(
        secret.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()

# Include as header:
# X-NeuraFlow-Signature: sha256=<signature>

Outgoing Webhooks

Use the HTTP Request action to send data to any external URL. Configure method, headers, body template, and retry policies for reliable delivery.

Testing Webhooks

Use the built-in webhook tester in the automation builder. It generates a sample payload based on your trigger configuration and executes the automation in test mode without affecting production data.