configure_webhook
Destructive
Manage webhook subscriptions for email events like replies, bounces, complaints, and unsubscribes. Create requires a public HTTPS URL and event types; update or delete by ID. Delivery signed with HMAC-SHA256.
Instructions
Manage an outbound webhook subscription. action = create (needs url + eventTypes: reply|bounce|soft_bounce|complaint; optional secret/active) | update (needs id + one changed field; active:true re-enables an auto-disabled one, active:false pauses; secret rotates) | delete (needs id). create/rotate return the HMAC signing secret ONCE. URLs must be https to a public host (private/metadata IPs rejected). Deliveries are signed X-Coldrig-Signature: sha256=HMAC-SHA256(secret, raw body).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | Required for update/delete. | |
| url | No | Required for create. HTTPS endpoint; private/link-local/metadata IPs are rejected. | |
| note | No | Ignored placeholder for symmetry; webhooks record no provenance note. | |
| action | Yes | ||
| active | No | Optional. On update, active:true re-enables an auto-disabled subscription; active:false pauses delivery. | |
| secret | No | Optional signing secret (>=16 chars). Omit on create to have one generated; pass on update to rotate. | |
| eventTypes | No | Required for create: which events to push (reply | bounce | soft_bounce | complaint). |