Webhooks

Webhook subscriptions send workspace events to an HTTPS endpoint you control. Common events include replies, positive replies, sends, bounces, and reply-label changes.

Create a subscription

Call POST /v1/settings/webhooks with the destination URL and the event types you want to receive. Store the returned subscription ID so you can remove it later.

Verify signatures

When a subscription includes a secret, Scheduler Zero signs each delivery with HMAC-SHA256 over the raw request body.

X-Webhook-Signature: <hex digest>
X-Webhook-Signature-Algorithm: sha256

Compute the HMAC using the unparsed request bytes and your subscription secret, then compare signatures with a constant-time comparison. Reject requests with a missing or invalid signature.

See the webhook operations in the REST API reference for full request and response schemas.