Skip to main content

​
What Webhooks Do

Webhooks send HTTP POST requests to your endpoint when:
  • Accounts are connected or updated
  • Sync jobs start, complete, or fail
  • Records are created, updated, or deleted

​
Requirements

RequirementDetails
HTTPS onlyYour endpoint must use HTTPS
POST methodAll webhooks are POST requests
Return 200Respond with 200 to acknowledge receipt

​
Security

Each webhook includes an X-Handled-Signature header containing a SHA256 HMAC signature. Use your webhook secret to verify requests come from Handled.

​
Retries

If your endpoint fails (4xx or 5xx response):
  • Handled retries up to 3 times
  • Exponential backoff between retries (max 10 seconds)
  • Webhook is deactivated after persistent failures
You’ll receive an email when a webhook is deactivated due to persistent failures.

​
Quick Start

1

Create Webhook

Create a webhook via UI or API
2

Set Up Endpoint

Create an HTTPS endpoint to receive events
3

Verify Signatures

Implement signature verification
4

Process Events

Handle events based on their type