Rule action: webhook

The webhook action sends a signed HTTP POST to your endpoint on each fire.

  1. Add a webhook action with the target URL.
  2. Optionally set a secret (used to sign the request) and custom headers.
  3. Save the rule.

Each request includes an X-Synacl-Signature: sha256=… header — an HMAC-SHA256 of the body using your secret. Verify it on your side to confirm the request is genuinely from Synacl; see verifying webhook signatures. Your endpoint should return a 2xx quickly. Repeated failures show up as action/failed events.