From xactions
Create, manage, and test webhooks in XActions for HTTP notifications on events like automation job completions, failures, and follower changes. Integrates with external systems.
How this skill is triggered — by the user, by Claude, or both
Slash command
/xactions:webhooksThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
API-powered webhook system for receiving real-time event notifications from XActions.
API-powered webhook system for receiving real-time event notifications from XActions.
| Goal | Route | Method |
|---|---|---|
| Create a webhook | POST /api/webhooks | REST API |
| List webhooks | GET /api/webhooks | REST API |
| Update a webhook | PATCH /api/webhooks/:id | REST API |
| Delete a webhook | DELETE /api/webhooks/:id | REST API |
| Test a webhook | POST /api/webhooks/:id/test | REST API |
POST /api/webhooks
Authorization: Bearer <token>
Content-Type: application/json
{
"url": "https://your-server.com/webhook",
"events": ["operation.complete", "follower.lost", "follower.gained"],
"secret": "your-signing-secret"
}
POST /api/webhooks/:id/test
Authorization: Bearer <token>
Sends a test payload to the registered URL.
| Event | Triggered when |
|---|---|
operation.complete | An automation job finishes successfully |
operation.failed | An automation job fails |
follower.gained | You gain a new follower |
follower.lost | You lose a follower |
job.started | A Bull queue job begins |
job.completed | A Bull queue job completes |
Webhooks are signed with HMAC-SHA256 using your secret:
const signature = req.headers['x-xactions-signature'];
const expected = crypto.createHmac('sha256', secret)
.update(JSON.stringify(req.body))
.digest('hex');
const isValid = crypto.timingSafeEqual(
Buffer.from(signature),
Buffer.from(expected)
);
GET /api/webhooks/:id/deliveriesfollower.gained / follower.lost eventsnpx claudepluginhub nirholas/xactionsDesigns reliable webhook systems using Stripe patterns: resource.action event naming, JSON envelope payloads, HMAC-SHA256 signing, exponential backoff retries, deduplication, and endpoint implementation.
Registers, unregisters, and lists webhook subscriptions for the Ayrshare MCP server to receive push notifications on social post/account events instead of polling.
Guides webhook design, inbound handling with HMAC verification and idempotency, outbound delivery with retries, circuit breakers, and dead letter queues.