Outbound webhooks POST JSON events from Chatevo to your HTTPS endpoint when things happen — new messages, conversation updates, tool results, or custom workflow hooks.
- Go to Integrations → Webhooks → Outbound (or deployment settings).
- Endpoint URL — your receiver (must be HTTPS in production).
- Select events to subscribe.
- Copy the signing secret — used to verify HMAC signatures.
- Save and send a test delivery.
| Property | Detail |
|---|
| Method | POST |
| Content-Type | application/json |
| Signature | HMAC header (see security doc) |
| Retries | Exponential backoff on non-2xx |
Your server must validate every payload before processing:
- Read raw body (before JSON parse mutates bytes).
- Compute HMAC with your signing secret.
- Compare to
X-Chatevo-Signature (or documented header) using constant-time compare.
Full algorithm: Webhook HMAC signatures.
| Event | Your handler |
|---|
message.created | Sync to data warehouse |
conversation.ended | Trigger CSAT survey |
tool.failed | PagerDuty alert |
| Outbound webhooks | Zapier |
|---|
| Your code, any stack | No-code multi-step Zaps |
| HMAC-signed raw JSON | Zapier-managed auth |
| Issue | Fix |
|---|
| 401 on verify | Clock skew; wrong secret |
| Missing events | Subscription list; deployment filter |
| Duplicates | Idempotent handling by event ID |
