Webhooks
Tuco sends HTTP POST requests to your endpoint when message events occur. All payloads are signed with HMAC-SHA256.
Setup
- Go to API Keys → Webhooks tab
- Click Add Webhook
- Enter your endpoint URL
- Save the generated webhook secret
Events
Payload Structure
Signature Verification
Always verify the signature before processing webhook payloads. Reject requests with invalid signatures.
Testing
Click the Test button next to any webhook in the dashboard. Tuco sends a test payload with testMode: true and shows you the response status + latency.
Retry Policy
Tuco does not retry failed webhook deliveries. If your endpoint returns a non-2xx status, the event is logged but not resent. Use the Test button to verify your endpoint is reachable before going live.
Common Patterns
SMS Fallback
CRM Update