Receive a Qonvera CRM event

Webhook

POST

crmEvent

Verify X-Qonvera-Signature against the exact request bytes using HMAC-SHA256(secret, timestamp + '.' + rawBody), reject stale timestamps, and deduplicate X-Qonvera-Event-Id. Any 2xx acknowledges the event. Qonvera retries timeouts, 408, 409, 425, 429, and 5xx responses with bounded backoff.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Header Params

Body Params application/jsonRequired

Examples

Responses

🟢200

Event accepted and durably deduplicated.

This response does not have a body.

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://your-api-server.com' \
--header 'X-Qonvera-Event-Id;' \
--header 'X-Qonvera-Timestamp;' \
--header 'X-Qonvera-Signature;' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
    "type": "contact.created",
    "api_version": "2026-08-20",
    "occurred_at": "2019-08-24T14:15:22.123Z",
    "data": {
        "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
        "name": "string",
        "email": "user@example.com",
        "phone_e164": "string",
        "account_id": "449e7a5c-69d3-4b8a-aaaf-5c9b713ebc65",
        "updated_at": "2019-08-24T14:15:22.123Z"
    }
}'

Modified at 2026-08-21 05:35:15

List pipelines

Uuid