Outbound webhooks

Developers

Outbound webhooks

Subscribe an HTTP endpoint (or a Slack / Teams URL) to task, sprint, meeting, code, and mention events.

Outbound webhooks

Skrum is the all-in-one AI project control plane — team chat, tasks and sprints, native video meetings, and inbound code activity in one workspace, with every AI action waiting for a human yes.

Outbound webhooks fan out event notifications. They are the outbound counterpart to Code activity — Skrum is the source, the third party is the receiver.

  1. Create. Settings → Integrations → Webhooks → New. URL, signing secret (Skrum generates one; shown once), and event subscriptions (task.*, sprint.*, meeting.*, code.*, message.mention).
  2. Signed body. Every delivery carries an HMAC-SHA256 signature over the raw body, verified with your signing secret.
  3. Retries. Non-2xx retries with exponential backoff, capped at five attempts. SSRF-protected — private IPs and metadata hosts are refused.

Slack / Teams

Paste a Slack or Teams incoming-webhook URL. Skrum recognizes the scheme, formats a bounded plain-text payload, and posts it — same SSRF check as any outbound URL.

FAQ

  • Rotate a secret? Delete + recreate; secrets are shown once.
  • Delivery history? Recent deliveries are shown per webhook, with the failure class on non-retryable errors (ssrf_refused, signing_failed, http_4xx).

See also: Skrum documentation