Set up webhooks and verify them

1. Create a page on your server that accepts a POST request and answers quickly with a 200.
2. In your dashboard open Developers, Webhooks, press Add address, and paste your https address. Pick the events you want or choose everything.
3. Copy the signing secret we show you once, and store it where only your server can read it.
4. Press Send a test and check that your server received it.
5. In your page, verify the X-IdentifyOrg-Signature header before trusting the message. The docs have a short example.

Good habits

• Answer fast and do the real work afterwards. If you take too long we treat it as a failure and retry.
• Expect the same event twice sometimes. Use the id in the message to ignore repeats.
• Check the See deliveries list if something did not arrive. You can resend any failed one.
• If your address fails many times in a row we pause it. Fix your server and turn it back on.