Skip to content

Learn · Integrations

Webhooks both ways

Take posts in from your tools, and send signed notices out to your systems.

Checked against the product on · written for people writing code

Posts coming in

A webhook feed gives you a URL. Any tool that can post JSON becomes a data source.

  1. Add a feed of the webhook kind and copy the URL.

  2. Set a signing secret and give the same secret to the sending tool.

    The signature is checked before the body is read.

  3. Name a field the payload must carry.

    A post missing that field is rejected at the door, so a misrouted tool fails loudly.

  4. Send a test post and read the live tail.

Note. A post carrying a list at the top level becomes one event per item, which suits tools that batch.

Notices going out

console.dmzagent.com/webhooks

Automate

Webhooks

1All eventsAdd endpoint
2
EndpointEventsSigning secretLast delivery
https://ops.example.com/dmzreview.held, review.approvedSet200 · 12 seconds ago
https://example.com/auditledger.appendedSet200 · 1 minute ago
3Every delivery carries a signature header. Verify it before you trust the body.
Figure. The webhooks screen: endpoints, their subscriptions, and the last delivery result. The webhooks screen: endpoints, the events each subscribes to, the signing secret state and recent delivery results.
  1. Open Webhooks and select Add endpoint.1

  2. Pick the events the endpoint subscribes to.2

    The delivery log records every attempt and its response code.

  3. Read the signature line and verify every delivery before you trust the body.3

What you can subscribe to.
EventSent when
A call was heldA rule proposed a sensitive action and a person is needed.
A review closedA person approved, changed, or declined a held action.
A fix was dispatchedAn approved action left the platform for your systems.
An entry was writtenThe logbook gained an entry.
A standing changedA watched thing moved between allowed, take a look, and block.