Inbound webhooks
An automation can start when another app (Zapier, Make, n8n or your own software) calls a secret web address. This is the opposite direction of the webhooks on the other pages.
#The address
The address has the form /public/automations/hook/<token>. The token is secret. Anyone who knows the address can start the automation, so treat it like a password.
- The address is not under
/v1and needs no API key. - There is no required signature. The secret address is the protection.
- To read the address of an automation with a key, the key needs the permission
hooks:read_secret. This permission is ticked on its own.
#Duplicates
If the same event arrives twice without an ID and with the same content within one to two hours, it is discarded and noted internally.
#Filters
A filter is set when the automation is created. It decides which events start the automation. See Build an automation.