Webhooks

Webhooks send HTTP POST requests to your endpoint when content events occur. Go to Project Settings → Webhooks to manage them.

Creating a webhook

Click + New Webhook
Fill in the details:

Field	Description
URL	Your endpoint URL (e.g. `https://your-site.com/api/revalidate`)
Events	Which events trigger this webhook
Active	Toggle on/off without deleting

Click Save

Events

Event	Triggered when
`entry.created`	A content entry is created
`entry.updated`	A content entry is updated
`entry.deleted`	A content entry is soft-deleted
`entry.published`	An entry’s status changes to `published`
`entry.unpublished`	An entry’s status changes to `draft`
`media.uploaded`	A file is uploaded to the media library
`media.deleted`	A file is deleted from the media library

Payload

Each webhook sends a JSON payload:

{
  "event": "entry.updated",
  "project": "f99cb038-...",
  "collection": "posts",
  "entry": {
    "uuid": "550e8400-...",
    "status": "published",
    "locale": "en"
  },
  "timestamp": "2024-01-15T12:00:00+00:00"
}

Signature verification

Each request includes an X-Jambo-Signature header for security:

X-Jambo-Signature: sha256=abc123...

Verify it using the APP_WEBHOOK_SECRET_KEY from your .env:

const crypto = require('crypto');
const sig = 'sha256=' + crypto.createHmac('sha256', secret)
  .update(rawBody).digest('hex');
if (sig !== req.headers['x-jambo-signature']) {
  return res.status(401).send('Invalid signature');
}

Requirements

Webhooks are processed asynchronously via the Symfony Messenger queue. Make sure a worker is running — see Webhook Setup.