React to eventsTroubleshoot webhooks

Troubleshoot webhooks

Find out why a webhook isn't arriving or is being rejected.

Imploy records the last delivery time, HTTP status and error code on each webhook, so start there.

Checklist

Is it enabled?

A disabled webhook sends nothing, and can't be tested.

Is the event selected?

The webhook only sends the events you chose. See Events.

Run a test

Use Test to send a sample. If the test arrives but real events don't, the problem is the event or the data, not the URL.

Read the last status

Look at the HTTP status and error code recorded on the webhook.

Common causes

SymptomLikely cause
Test returns 401 or 403Your endpoint is rejecting the secret header, or your own auth is in front of it
Nothing arrivesThe URL isn't public HTTPS on port 443, or it resolves to a private address
TimeoutsYour endpoint took more than 5 seconds, or the connection took more than 2. Reply first, process after
Redirect errorsImploy doesn't follow redirects. Use the final URL
Signature failsYou parsed the body before checking it, or you're using the wrong secret. See Verify signatures
Missing eventsEach delivery is attempted once. Reconcile with the API. See Keep a local copy up to date

Saving the URL fails

The destination must follow the rules on Setting up. Imploy addresses and private ranges are refused, and the secret header name must be Authorization or start with X- (but not X-Imploy-).