Skip to content
Browse docs · Integrations
Docs/Integrations/Custom webhook events

Custom webhook events

Updated Apr 8, 2026 · 4 min read

Subscribe any tool to InboxLee lifecycle events.

On this page · 4
  1. Available events
  2. Configuring
  3. Verifying signatures
  4. Retry policy

InboxLee POSTs a JSON payload to a URL you configure whenever one of the subscribable events happens. Use this to wire any tool - Slack, PagerDuty, your billing system, an internal CRM.

Available events

  • order.completed - an order finished provisioning end to end.
  • domain.verified - the domain passed DNS verification.
  • mailbox.ready - mailbox created and ready for sending.
  • blacklist.hit - a monitored domain appeared on one of the six blacklists. Fires once per new listing, not daily for an ongoing one.
  • Configuring

    In InboxLee → Settings → Webhooks → Create. Provide a URL, select events, choose a signing secret. InboxLee signs every payload with HMAC-SHA256.

    Verifying signatures

    X-Inboxlee-Event: blacklist.hit
    X-Inboxlee-Signature: sha256=<hmac-hex>

    Recompute HMAC-SHA256 of the raw request body, keyed by your signing secret, and compare it to the hex in the header. Reject the payload if it does not match. Compare over the raw body, not a re-serialised object - key order matters.

    Retry policy

    On a non-2xx response or a network error, InboxLee retries with exponential backoff - 1, 2, 4, 8, 16 minutes, then capped at 30 - for up to 6 attempts before the delivery is marked failed. The dashboard surfaces failed deliveries so you can investigate.