Skip to content
Email BuddyYour workspace for mail

Webhooks

Let your applications receive signed email lifecycle events.

Settings

Add an endpoint

These endpoints belong to your sign-in and receive application email events across its mailbox connections.

Use a public HTTPS endpoint on port 443. Callback bodies contain lifecycle metadata; message content and recipient addresses are excluded.

Your endpoints

Loading endpoints…

Verify each callback

Verify the HMAC-SHA256 signature over the timestamp, a period and the exact request body. Reject stale timestamps and remember event IDs to avoid applying the same event twice. A replay uses the same event ID, and callbacks can arrive out of order.

Return a successful response after saving the event. Each delivery cycle permits up to eight attempts. Replaying a callback starts another cycle; it does not send another email.