Webhooks
Webhook delivery
When subscribed events occur, Weav sends an HTTPS POST request to your configured webhook URL.
Verification headers:
X-Weav-Event: event typeX-Weav-Signature: HMAC SHA-256 of the raw JSON body using your webhook secretContent-Type:application/json
Delivery behavior:
- Any
2xxresponse is treated as success 410 Gonedeactivates the webhook immediately- Other non-2xx responses are retried up to 10 attempts with exponential backoff (1m, 2m, 4m, …)
- Webhooks are auto-deactivated after repeated permanent failures
This section is reference-only to document payload shape and verification guidance.
WEBHOOK
Authorizations
Workspace API token.
Include abilities external-api:read and/or external-api:write.
Body
application/json
Available options:
conversation.created, conversation.deleted, conversation.assigned.updated, conversation.status.updated, conversation.priority.updated, conversation.tags.updated, conversation.customer.message.created, conversation.user.message.created, customer.created, customer.updated, customer.deleted, agent.created, agent.updated, agent.deleted, training.created, training.updated, training.deleted, training.agent.assigned Unique webhook delivery identifier
Organization UUID that emitted the event
Event-specific payload. Shape depends on event type.
Response
Acknowledge receipt