Skip to main content

Webhooks

Carries near-real-time signals booking lifecycle payments forms waitlist with signed payloads optional retry semantics idempotency guidance.

Adding the App​

  1. Endpoint HTTPS certificate valid auth HMAC shared secret rotation playbook.
  2. Apps → App Store → Webhooks register URL choose event subset least privilege.
  3. Implement the receiver so it answers with HTTP 2xx within about 300 ms, then queue heavy work asynchronously, verify signatures, and guard against replays.
  4. Staging shadow traffic parallel logging diff.

Signature mismatch Apps troubleshooting clock skew body canonicalisation.

App-specific requirement​

PII minimisation payload choose fields intentionally regulatory transport logs redact.

Usage​

CRM opportunity stage advance​

What it is for: Sales orchestration.

Data warehouse append-only lakehouse bronze layer​

What it is for: Analytics gravity.

Slack teams notification bridge optional fan-out​

What it is for: Human awareness.

Inventory ERP decrement services consumable​

What it is for: Stockout prevention.

Security SIEM anomaly booking velocity fraud​

What it is for: SOC enrichment.

(Prerequisites: observability dead-letter queue DLQ oncall runbook.)

Removing Webhooks​

  1. Installed apps delete endpoints secrets rotate.

After you disconnect​

Timelish stops emission consumers quiet confirm no silent dependency automation stall.

Consumer cleanup​

Remove HMAC secrets archive integration monitor alerts.