Webhooks

Webhooks push events from MCA Manager into your own systems in real time. Manage endpoints under Settings → Webhooks (requires the webhooks permission).

Add an endpoint

Provide the destination URL and the events you want (or * for all). Each endpoint gets a signing secret used to sign every delivery.

Verifying signatures

Each delivery is a JSON POST with headers:

• X-Timestamp - unix-style timestamp
• X-Signature - HMAC-SHA256, hex

Compute the signature over the string timestamp + "." + body using your endpoint’s secret and compare with X-Signature. Reject if they don’t match or the timestamp is stale.

Delivery

Deliveries are at-least-once with one retry; inspect recent attempts and statuses from the webhooks screen.

Can’t find what you need? Return to the app or contact your administrator.