Conversation created
Incoming webhook deliveries are authenticated with HMAC signature headers (X-Chatway-Signature and X-Chatway-Timestamp), not your Chatway API key.
A new chat has started.
Use conversation.created to open a corresponding support ticket or start tracking a new chat. Store data.conversation.id as the conversation identifier and data.visitor.id as the contact identifier in your integration. To retrieve the transcript, use the conversation ID with List Conversation Messages. Subscribe to Message received for incoming messages and Contact created for contact creation or identification. These events support different parts of the workflow.
For signature verification and retries, see Webhooks overview.
Headers
Event name for this delivery.
Unique webhook subscription ID.
Unique ID for this HTTP delivery attempt (del_ + 32 hex characters). A new value is sent on each retry.
Attempt number for this event (1 on first try). Sent as a decimal string in the header.
Unix timestamp in seconds when the request was signed. Sent as a decimal string in the header.
sha256= followed by the lowercase hex HMAC SHA256 of {X-Chatway-Timestamp}.{raw request body}, keyed with your webhook secret. The example is computed for the example body serialized as compact JSON, the example timestamp, and the placeholder secret whsec_exampleSecretForDocsOnly00000000.
Payload
Example payload
{
"id": "evt_1234567890abcdef1234567890abcdef",
"event": "conversation.created",
"data": {
"conversation": {
"id": "0f46c0a1-8938-40e3-b2b5-bb56f569fcab",
"channel": "website",
"status": "open",
"widget_name": "Main site widget",
"identifier": "eouqtiupanm6uvglwshy",
"created_at": "2026-02-04T10:30:00Z",
"first_page_url": "https://example.com/pricing"
},
"visitor": {
"id": "9b0c5fe6-35ad-459d-b6ba-4288191f84f1",
"name": "John Doe",
"email": "john@example.com",
"phone": "+1XXXXXXXXXX",
"country": "US",
"ip": "203.0.113.10",
"first_page_url": "https://example.com/pricing"
}
},
"occurred_at": "2026-02-04T10:30:00Z",
"version": "2026-09"
}Response
Return any 2xx status to acknowledge receipt.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.