Signed Webhooks, Easier to Verify
Webhooks have been in Sendbox since launch. This release makes the signature side easier to work with, so your endpoint can confirm a payload really came from Sendbox before acting on it.
Per-Endpoint Signing Secrets
- Every webhook endpoint gets its own secret key, managed from campaign settings
- Each payload carries a signature generated from that secret, so you can reject anything that does not match
- Covers all six events: lead.created, lead.added, lead.replied, lead.bounced, email.sent and email.opened
- Point it at any HTTP endpoint: your own service, a CRM, Zapier, Make or n8n
Webhooks are configured per campaign, so one client's pipeline never receives another client's events. The signature check closes the last gap: you know the request is genuine.
