Skip to main content
Required scopes: automations_read, developer_read, developer_write
DateTime!
required
When the inbound webhook was created.
[String!]
Field names from the body’s root to a value that identifies each event; a repeat is accepted once. Null: Standard Webhooks uses webhook-id, other methods treat identical bodies as repeats.
String
The header that carries the signature or the shared secret. Set only for HMAC and SHARED_SECRET_HEADER.
InboundWebhookHmacAlgorithm
The HMAC hash. Set only for HMAC.
ID!
required
The id of this inbound webhook. An inbound webhook trigger names it.
DateTime
When a request was last rejected, recorded at most once a minute. Null when none has been.
String
Why the last rejected request was rejected.
String!
required
The inbound webhook’s name, unique in the store.
Boolean!
required
Whether a secret is stored. Requests are rejected until one is.
InboundWebhookSignatureEncoding
How the HMAC signature is written. Set only for HMAC.
String
Text before the signature in its header, such as sha256=. Set only for HMAC.
DateTime!
required
When the inbound webhook’s name, settings, URL or secret last changed.
String!
required
The URL the sender posts to. Its last path segment identifies the endpoint; it doesn’t authenticate.
String
The basic auth username. Set only for BASIC_AUTH.
InboundWebhookVerificationMethod!
required
How requests are verified.