Flow Webhooks

Subscribe to webhook events for a Flow App

Creates a webhook subscription. Events matching eventType will be delivered to targetUrl with HMAC-SHA256 signature validation using the provided secret. The targetUrl must not resolve to a private/loopback IP (SSRF protection).

post/flow/apps/{appId}/subscriptions

Path parameters

appIdstring required

Request body

eventTypestring required

Event type to subscribe to (e.g. "contact.requested", "step_submitted")

targetUrlstring uri required

HTTPS URL to receive webhook deliveries (no private IPs)

secretstring required

Shared secret for HMAC-SHA256 signature verification

Response

Subscription created

subscriptionIdstring required