Webhooks

Create the receiver

Create a production webhook in your automation tool, copy its public HTTPS URL, and add it under Dashboard → Webhooks. Choose only the events the workflow needs.

Save the secret

LinkzLOL displays the signing secret once. Store it with the workflow credentials. Each request includes x-linkz-event and x-linkz-signature headers.

Verify the signature

Compute HMAC SHA-256 over the exact raw request body using the endpoint secret. Compare the hexadecimal digest with the value after sha256= in x-linkz-signature.

const expected = createHmac("sha256", secret)
  .update(rawBody)
  .digest("hex");

Handle delivery

Return an HTTP 2xx status within eight seconds. Recent success, response status, or network failure appears under the endpoint in LinkzLOL.