Developers
Outbound webhooks
Subscribe an HTTP endpoint (or a Slack / Teams URL) to task, sprint, meeting, code, and mention events.
Outbound webhooks
Skrum is the all-in-one AI project control plane — team chat, tasks and sprints, native video meetings, and inbound code activity in one workspace, with every AI action waiting for a human yes.
Outbound webhooks fan out event notifications. They are the outbound counterpart to Code activity — Skrum is the source, the third party is the receiver.
- Create. Settings → Integrations → Webhooks → New. URL, signing secret (Skrum generates one; shown once), and event subscriptions (
task.*,sprint.*,meeting.*,code.*,message.mention). - Signed body. Every delivery carries an HMAC-SHA256 signature over the raw body, verified with your signing secret.
- Retries. Non-2xx retries with exponential backoff, capped at five attempts. SSRF-protected — private IPs and metadata hosts are refused.
Slack / Teams
Paste a Slack or Teams incoming-webhook URL. Skrum recognizes the scheme, formats a bounded plain-text payload, and posts it — same SSRF check as any outbound URL.
FAQ
- Rotate a secret? Delete + recreate; secrets are shown once.
- Delivery history? Recent deliveries are shown per webhook, with the failure class on non-retryable errors (
ssrf_refused,signing_failed,http_4xx).
See also: Skrum documentation