← All integrations

Automation integration

Custom Webhooks for TidyOps

Receive real-time HTTPS push notifications for events in your TidyOps workspace.

VerifiedReviewed 2026-09-11

Verified status

TidyOps has confirmed the setup path, production data flow, permission boundaries, known limitations, and support ownership described below.

Setup

  • Company owners configure endpoint URLs and select event types in the integrations workspace.
  • Upon creation, a signing secret is displayed once for secure storage.
  • Endpoints must accept POST requests and respond with a 2xx status code within 5 seconds.

How data moves

  • When an event occurs, TidyOps signs the payload using HMAC-SHA256 and the subscription secret.
  • The payload is delivered to the configured endpoint URL.
  • If the delivery fails, TidyOps retries with exponential backoff up to the maximum attempts.

Limitations

  • Webhooks cannot be used to retrieve historical data; they are strictly push-based notifications.
  • If a webhook fails repeatedly, the subscription will be automatically disabled to prevent service degradation.
  • Event payloads are strictly typed and may change structure in major API versions.

Permissions and data access

  • Only administrators and company owners can view or manage webhook subscriptions.
  • Webhook secrets are generated securely and are only visible at the moment of creation or rotation.

Support

  • Administrators can view detailed delivery logs, including HTTP response codes and error bodies.
  • Failed deliveries can be manually replayed from the delivery history view.
  • TidyOps support can assist with webhook signature validation questions.

Contact TidyOps about workspace setup or payment records. Contact Stripe about account verification, payouts, or provider availability.

Quick answers

Is the Custom Webhooks integration verified?
Yes. TidyOps verified the setup, production data flow, permissions, limitations, and support path on 2026-09-11.
Does TidyOps expose Custom Webhooks credentials?
No. Integration pages and analytics exclude credentials, full card details, and client secrets.