Before you start
- Outbound webhooks are available on Team plan workspaces.
- You need workspace permission to manage webhooks (OWNER and ADMIN by default).
- Your endpoint must accept HTTPS POST requests and respond with a 2xx status.
Create a webhook
- Open Workspace Settings → Webhooks.
- Click Add webhook.
- Fill in a Name and the Target URL of your endpoint.
- Select the event types you want to receive.
- Save. The webhook can be enabled or disabled at any time.
Available events
- Issue created
- Issue updated
- Issue deleted
- Issue assigned
- Issue status changed
- Comment added
Verify requests (signing)
Each webhook has a signing secret. You can rotate it from the webhook's menu — the new secret is shown once, so store it right away. Every delivery includes these headers:
X-Ouraboard-Event— the event type (for exampleISSUE_CREATED).X-Ouraboard-Event-Id— a unique id for deduplication.X-Ouraboard-Timestamp— when the delivery was sent.X-Ouraboard-Signature—sha256=<hex>.
To verify: compute an HMAC-SHA256 of the string
timestamp + "." + body using your signing secret, hex-encode it, and compare it to
the signature header (after the sha256= prefix). Reject requests that do not match.
Delivery log and troubleshooting
- Each webhook has a delivery log showing recent attempts, the response status, and a snippet of your endpoint's response — useful for debugging.
- A delivery counts as successful when your endpoint returns a 2xx status.
- If deliveries fail, check that the URL is reachable, responds quickly, and accepts POST.
Just want notifications in a channel? The Slack integration is simpler for that.