API Keys & Encryption

To enhance security, incoming webhooks support use of API keys and data encryption.

API Key

Use API keys to authenticate incoming webhook calls.

When toggled on, the system will auto-generate the key. Copy the key and include it in the reqest header as x-api-key.

Webhook will not be received if this is toggled on and x-api-key is not in the header.

Data ecryption is supported using the AES-256 encryption algorithm in either CBC (Cipher Block Chaining) or GCM (Galois/Counter Mode) modes.

After toggling on, provide:

AES key (32 Characters long)

IV (16 Characters long)

Cipher mode (CBC or GCM)

The request header MUST have x-encrypted: true in the request header to indicate that this request is encrypted.