Declara
⌘K
engineerP0Updated
Was this page helpful?

A webhook lets your own systems react to what happens in Declara — a new alert, a case opening, a deadline reminder — without polling the API. This page covers registering an endpoint and verifying that a delivery actually came from Declara. For what each event means and what its payload contains, see the webhook event catalog.

Before you start

You need permission to manage integrations. Have an HTTPS endpoint ready that can accept a POST request and return a 2xx status quickly — Declara treats delivery as best-effort and won't retry a slow endpoint into working.

Steps

  1. Open Settings → Integrations and add a webhook.
  2. Enter your endpoint URL.
  3. Optionally, subscribe to specific events rather than all of them — an empty filter receives everything.
  4. Save. Declara generates a signing key for this endpoint; it's used to sign every delivery, and isn't shown again after creation, the same way an API key's secret isn't.
  5. Use the test button to send one delivery to this endpoint specifically, without posting to any other configured integration.

Verifying a delivery is genuine

Every delivery carries a timestamp and a signature computed over that timestamp and the raw body, using your endpoint's signing key. Recompute the same signature on your end and compare it before trusting the payload — the full mechanics, including the exact headers and the HMAC construction, are in the webhook event catalog. Reject anything where the timestamp is too old to guard against a replayed request.

What you should see

A delivery log per integration showing whether each attempt was delivered or failed, with the response status or error recorded — so an endpoint that's quietly stopped working shows up as failing rather than looking healthy by default.

Delivery is best-effort: an unreachable or slow endpoint never blocks the case, alert, or reminder that triggered it. Don't rely on a webhook as the only place an event is recorded — the case or alert itself, visible in the product and the API, is the source of truth.

Related