Webhooks
Zapnoty sends HTTP POST to your URL when events occur. One webhook per project. Configured in the dashboard or via API.
Events: subscription.created, subscription.deleted, delivery.success, delivery.failed, broadcast.completed, button.clicked, auth.completed, ticket.created, ticket.replied, ticket.status_changed, ticket.assigned, ticket.closed.
Signature: X-Zapnoty-Signature header contains HMAC-SHA256 of request body with your webhook secret.
Signature verification:
// Node.js
const crypto = require('crypto');
const signature = req.headers['x-zapnoty-signature'];
const expected = crypto
.createHmac('sha256', webhookSecret)
.update(JSON.stringify(req.body))
.digest('hex');
if (signature !== expected) // отклонить запрос
Payload format:
{
"event": "subscription.created",
"timestamp": "2026-03-05T12:00:00Z",
"data": {
"subscriber_id": "sub_abc",
"channel": "telegram"
}
}
Retry policy
On delivery failure, webhooks are automatically retried up to 3 times with exponential backoff (1s → 2s → 4s). Each attempt has a 10-second timeout. 4xx responses from your server are not retried. We recommend implementing idempotent processing on your side.