integration-callbacks

Monday Webhook

Handle Monday.com webhook events.

Auth (closes audit FINDING [MONDAY-AUTH]): Monday sends a JWT in the Authorization header signed with the app's signing secret (HS256). When any enabled Monday integration stores a signing_secret credential, event deliveries must carry a JWT that verifies against one of them. The challenge handshake is answered after the 404 existence gate but before JWT verification, mirroring the Slack url_verification precedent. No Monday integration wired at all → 404.

post/integrations/monday/webhook

Request

  • Base URL: https://api.withverifa.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.withverifa.com/integrations/monday/webhook
  • Auth: none declared

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.