Webhook Development Guidance

These are the steps to setting up your integration with to.co using Webhooks:

Set Up Your Webhook Server

You need to create and setup your webhook first because the next step requires your webhook's POST URL.

Your server will need to be configured to accept HTTPS connections using TLS 1.2 as a minimum. The ciphers currently supported are as follows:

  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-SHA384
  • AES128-GCM-SHA256
  • AES256-GCM-SHA384
  • AES128-SHA256

This list is subject to change.

Your webhook endpoint should:

  • Handle POST requests with a Content-Type of "application/json"
  • Return a 200 response code for all valid requests.
  • Return a Content-Type of "application/json".
  • Return a JSON body with a simple result. We do not process the body in the response.