Webhooks

Webhooks let FileChute push real-time event notifications to your own endpoints, Zapier, Make, or any HTTP service. Instead of polling the API, you receive an immediate POST request whenever something happens.

Supported events

• request.created — a new file request was created.
• request.completed — all checklist items have been uploaded or skipped.
• request.closed — a request was manually closed or archived.
• file.uploaded — a file was uploaded to a checklist item.
• file.skipped — a checklist item was marked as not applicable by the recipient.
• reminder.sent — a reminder email was sent to the recipient.

Creating a webhook

1. Go to Settings > Integrations and scroll to the Webhooks section.
2. Click Add Webhook.
3. Enter the target URL (must be HTTPS).
4. Select the events you want to receive.
5. Click Save.

Payload format

Every webhook request is an HTTP POST with a JSON body containing:

{
  "event": "file.uploaded",
  "timestamp": "2026-02-19T12:34:56Z",
  "data": {
    "requestId": "...",
    "checklistItemId": "...",
    "fileName": "bank-statement.pdf",
    "fileSize": 204800
  }
}

Verifying signatures

Each webhook includes an X-FileChute-Signature header containing an HMAC-SHA256 signature of the request body. Use the signing secret shown in your webhook settings to verify authenticity:

const crypto = require("crypto");

function verify(body, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

Retries

If your endpoint returns a non-2xx status code, FileChute retries the delivery up to 3 times with exponential backoff. Failed deliveries are visible in the Delivery log for each webhook.

Testing

Use a service like webhook.site to inspect payloads during development. You can also review recent deliveries from the webhook detail page in Settings.

Availability

Webhooks are a Pro plan feature. See the API Endpoints reference for programmatic webhook management.