Webhooks

Coyote supports inbound and outbound webhook integrations under Admin → Integrations.

Inbound webhooks

Inbound endpoints accept HTTP POST requests and create External Transactions.

1. Create or open an inbound webhook integration.
2. Leave Target Entity set to External Transaction.
3. Choose authentication: API key, HMAC signature, bearer token, or none.
4. Save, copy the generated API-domain URL and secret, and store the secret in the sending system.
5. Use Test with a representative JSON payload.
6. Review Event History for processing counts and errors before enabling production traffic.

Payloads can be a single object, an array, or an object containing an array under data, records, items, results, or payload. Configure field mappings when source names differ from the expected external-transaction fields.

Caution

Authentication type None exposes the endpoint to anyone who knows its URL. Use API key, HMAC, or bearer authentication for production and rotate the secret if it is disclosed.

Outbound webhooks

Outbound endpoints send selected Coyote events to an HTTPS destination.

1. Enter the destination URL and authentication settings.
2. Select at least one event type.
3. Optionally add conditions to limit delivery.
4. Save and use Test to verify the receiver.
5. Inspect Event History for HTTP status and failure details.

The dispatcher retries transient failures and records delivery events. A condition-evaluation error fails closed so an unintended event is not sent.

Your administrator must grant access to manage and test webhooks. Never paste production secrets into comments, screenshots, or support tickets.