Webhooks
Get a signed notice for every lead, booking or sale.
In Settings → Integrations set the destination URL and pick the events: lead.created, appointment.created and sale.created. Each notice is a POST with { event, workspace_id, occurred_at, data }.
Compute the HMAC-SHA256 of the timestamp, a dot and the raw body with your signing secret, and compare it with the X-Webhook-Signature header:
X-Webhook-Signature: sha256=HMAC(secret, timestamp + "." + body)
If your server doesn't answer with a 2xx, delivery is retried after 1, 5, 30, 120 and 720 minutes and then marked as failed. Every delivery, with its status, shows in the log, next to the test button.
X-Webhook-Delivery is the same on every retry: use it to avoid processing a notice twice.