Wire it into whatever else you run.

Webhooks for 43 events across your apps, signed so you know they came from you, and API keys to add and read conversations.

An example webhook endpoint: its address, the six events it receives out of forty-three, and its recent deliveries, one of them being tried again.

Know the moment it happens.

An order paid, an invoice overdue, a booking made, a deal won: pick the events each of your systems should hear about.

An example of choosing webhook events from across the apps: orders, invoices, bookings and jobs, sales, forms and courses.

Signed, so you can trust it.

Every delivery carries the event, a delivery id and a signature of the body, made with your endpoint's own signing secret.

An example webhook request: the event name, a delivery id, and a signature of the body in its headers, and a body with the event, its data and when it happened.

Tried again until it lands.

If your server is down, the delivery is tried five more times over the next fifteen hours, and you can send any one again yourself.

An example of how a failed delivery is tried again: after one minute, five minutes, thirty minutes, two hours and twelve hours, with buttons to send it again or send a test.

Keys you control.

Make a key for each tool, see when it was last used, and revoke it the moment you want it gone.

An example of API keys: a new key shown once to copy, and an older one with when it was last used and a button to revoke it.

What Public API & Webhooks does

What your developer will want to know.

  • Create conversationsOpen a conversation in your inbox from any other system, with its subject, sender and priority.
  • Read them backList your conversations, newest first, filtered by status.
  • Sales from any storefrontWith Affiliate Program on, report an affiliate's sale from any shop you run.
  • HTTPS onlyWebhooks go only to secure addresses, checked on every redirect.
  • Room to work120 requests a minute for each workspace and caller.
  • A test on demandSend a signed test event to check your endpoint before anything real arrives.

Before you start

What can the API do?

Create conversations in your inbox and list them, and report affiliate sales from any storefront when you use the Affiliate Program.

Which events can a webhook send?

Forty-three, across orders, invoices and payments, estimates, jobs, bookings, deals and leads, forms, events, courses, campaigns, affiliates and your inbox. Pick all of them or only the ones you need.

How do I know a webhook came from CustoDesk?

Each one is signed with an HMAC-SHA256 of its body, using a secret you are shown once when you add the endpoint. Check it in the X-CustoDesk-Signature header.

Who can make API keys?

Admins. A key is shown once, kept only as a fingerprint, and can be revoked at any time.

Do I pay for each person on my team?

No. There is no charge per team member.

Connect the rest of your business.

Book a demo

We set it up around your business. Free for 14 days.

See what each app costs