Add an endpoint
Open Settings, choose Integrations, enter a public HTTPS endpoint and choose Add webhook. Localhost and private network destinations are not accepted.
Store the signing secret
Copy the signing secret when it appears. Use it to verify the HMAC SHA-256 signature against the exact request body before processing the event.
Respond quickly and safely
Return a successful HTTP response after validating and accepting the event. Make event processing idempotent so a repeated notification cannot create duplicate work.
Monitor or disable delivery
Integration settings show recent delivery status. Disable an endpoint that has been replaced, compromised or retired.