---
title: "Ingest a signed GoWhatsApp webhook event for hybrid monitoring"
method: POST
path: "/index.php/apps/twofactor_gateway/gowhatsapp/webhook"
tags: ["go_whats_app_webhook"]
---

# Ingest a signed GoWhatsApp webhook event for hybrid monitoring

`POST /index.php/apps/twofactor_gateway/gowhatsapp/webhook`

## Response `202`

Event accepted (processed or intentionally skipped)

- object
  - `processed` boolean, required
  - `message` string, required

## Other responses

- `400` — Malformed request body
- `401` — Invalid or missing HMAC signature
- `503` — Webhook ingestion is disabled

## Changes

- **2026-04-14** `493e46d5145c` — 1 info
  - endpoint added
- **2025-09-11** `373dd7146bb0` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/nextcloud/apis/twofactor-gateway/changes/index.php/apps/twofactor_gateway/gowhatsapp/webhook/post.md)

---

[API](https://skmtc.dev/nextcloud/apis/twofactor-gateway.md) · [All operations](https://skmtc.dev/nextcloud/apis/twofactor-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/nextcloud/twofactor-gateway/revisions/9766387abe8f/schema)