Webhooks: real-time events to your systems
Get contacts, deals, form submissions, meetings, paid invoices and tickets pushed to your URL the moment they happen — signed and retried.
Get contacts, deals, form submissions, meetings, paid invoices and tickets pushed to your URL the moment they happen — signed and retried.
Checking the signature
Each request has OmniMark-Signature: t=<unix time>,v1=<hex>. Compute HMAC-SHA256 of "<t>.<raw body>" with your secret, compare it to v1, and reject requests whose t is more than 5 minutes old. OmniMark-Delivery and the event id let you ignore duplicates.
Retries and switching off
If your endpoint doesn't answer 2xx within 10 seconds, the delivery is retried after 1 minute, 5 minutes, 30 minutes, 2 hours, 6 hours and 24 hours. An endpoint that fails 50 times in a row with no success for a day is switched off and owners/admins are notified; turn it back on when it's fixed.