Webhooks

Receive real-time HTTP callbacks when events happen in TotalApp — orders, task updates, employee changes and more.

What Are Webhooks?

Webhooks let external systems subscribe to events in TotalApp. When an event occurs (e.g. a new order arrives from Shopify, a task is completed, an employee record is updated), TotalApp sends an HTTP POST request to your configured endpoint URL.

Event fires in TotalApp

→

TotalApp POSTs payload

→

Your endpoint receives it

→

Your system acts

Supported Webhook Events

Topic	Trigger
`order.created`	New order received (Shopify / WooCommerce)
`order.updated`	Order status changed
`product.updated`	Product stock or price updated
`task.completed`	A PM task marked as done
`employee.created`	New employee record added in HR
`employee.updated`	Employee profile updated

Configuring a Webhook

Go to Settings → API & Integrations → Webhooks and click Add Webhook. Fill in:

Delivery URL: Your publicly accessible HTTPS endpoint
Topic(s): The events to subscribe to
Secret: Optional HMAC secret for payload verification

HTTPS Required

TotalApp only delivers webhooks to HTTPS endpoints. HTTP URLs are rejected. For local development use a tunnel tool such as ngrok.

Payload Format

Every webhook delivery is an HTTP POST with Content-Type: application/json. The body contains the event topic and the relevant resource data:

Example Payload

{ "topic": "order.created", "payload": { "id": "ord_123", "total": 149.99, "status": "pending" }, "ts": 1720000000000 }

Retry Policy

If your endpoint returns a non-2xx response or times out (30 s), TotalApp retries the delivery:

Attempt	Delay
1st retry	5 minutes
2nd retry	30 minutes
3rd retry	2 hours
Final failure	Delivery marked failed — visible in Webhook Logs

Frequently Asked Questions

How do I verify a webhook is from TotalApp?

If you set a secret when creating the webhook, TotalApp signs each delivery with an HMAC-SHA256 signature and includes it in the X-TotalApp-Signature header. Compute the HMAC of the raw body with your secret and compare.

Where can I see delivery logs?

Go to Settings → API & Integrations → Webhooks and click a webhook to view its delivery history, including status codes, response bodies and retry attempts.

What happens if my endpoint is down when a webhook fires?

TotalApp retries failed deliveries automatically on a backoff schedule (see the retry table above). If all retries fail, the delivery is marked failed and appears in Webhook Logs — it is not silently dropped, but it is also not retried indefinitely.

Can I subscribe to multiple event types with one webhook?

Yes. When creating a webhook, select as many event types as you need — every matching event is delivered to the same endpoint URL with a topic field in the payload identifying which event fired.