integration
Outbound webhooks
12 events. HMAC-signed. Delivery audited.
When a booking is created, a rent is returned, or a receipt is recorded, we POST a signed JSON payload to every URL you subscribe. Ideal for QuickBooks sync, Slack alerts, Zapier triggers.
- HMAC-SHA256 signature (X-CarRental-Signature header)
- Per-subscription signing secret, rotate on demand
- 12 events: booking.created, rent.returned, receipt.created, payout.created, etc.
- Deliveries logged with status + response snippet
How it works
services.webhooks.fire_webhook() fan-outs over every matching subscription. 8s HTTP timeout per URL; failures are logged not retried. Signed body = HMAC-SHA256(body, secret).
Subscribe at /dashboard/webhooks.