Organization and mailbox webhooks
Paid plans can now receive signed HTTP callbacks for email, mailbox, and recipient-consent events, scoped to an organization or a single mailbox.
What’s New
Webhooks
Broodnet can now send signed HTTP POST requests when activity occurs in your organization. Use them to start an autonomous triage run when mail arrives, update an internal system after a consent decision, or route agent activity into your own monitoring.
Choose the scope that matches the workflow:
- Organization: receive selected events from every mailbox in the organization, including mailbox creation and deletion
- Mailbox: receive email events and consent requests from one mailbox only
Available events cover email received, sent, and blocked; mailboxes created and deleted; and recipient consent requested, approved, and denied. Consent decisions are organization-scoped because approval applies across the organization.
Signed delivery and retries
Every request uses the Standard Webhooks 1.0 HMAC-SHA256 format, including a signed delivery ID and attempt timestamp. The whsec_ signing secret is shown once when the webhook is created and can be rotated from the dashboard.
The Broodnet webhook reference documents the delivery headers, signed content, verification example, payload envelope, retries, and event catalog.
Endpoints that require their own credentials can receive one custom authentication header with every delivery. This works with bearer tokens, API keys, and agent runtimes such as OpenClaw without putting credentials in the webhook URL. Header values are stored encrypted.
Failed deliveries are retried automatically. The delivery history records response codes, errors, attempt counts, and payloads so you can inspect each callback without leaving Broodnet. Endpoints can also be paused when a consumer is offline.
Get started
Open Webhooks in the dashboard, choose an organization or mailbox scope, select the events you need, and add your HTTPS endpoint. If the receiver requires a token or API key, add its authentication header before creating the webhook.