Outbound Webhooks, Event Streams & Security

1. Purpose of the Page

Outbound Webhooks enable real-time synchronization between NotifyIQ and your existing software stack. Whenever an inbound message arrives, a delivery receipt is acknowledged by Meta, or an AI bot performs a handoff, NotifyIQ dispatches an HTTP POST request to your designated endpoint with millisecond-level latency.

2. Who Uses It (Target Roles)

Interactive Visual Preview

3. Step-by-Step: Registering an Outbound Webhook

1. Prepare HTTPS Endpoint: Ensure your receiving server accepts HTTP POST requests with a valid SSL/TLS certificate.
2. Register Target URL: Click + Register New Webhook. Enter a human-readable description and paste your HTTPS URL.
3. Subscribe to Desired Events: Check the specific event checkboxes your integration requires (e.g., message.inbound and lead.status_changed).
4. Copy Signing Secret: NotifyIQ generates a unique 32-character webhook secret. Save this secret in your receiving server's environment variables to verify HMAC signatures.
5. Send Test Ping: Click Test Ping. NotifyIQ sends a mock payload and measures your endpoint's HTTP response code and round-trip latency.

4. 9 Granular Platform Event Types

5. Verifying HMAC-SHA256 Signatures in Node.js

const crypto = require('crypto');

function verifyNotifyIQWebhook(req, secret) {
  const signature = req.headers['x-notifyiq-signature-256'];
  if (!signature) return false;

  const expectedSignature = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(req.rawBody)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

6. Common Errors & FAQs