--- title: "Webhook destinations" description: "Send synced bank data as signed JSON to your own HTTPS endpoint. Connect an endpoint once, point a feed at it, and verify deliveries with your signing secret." section: "Integrations" canonical: "https://banksync.io/docs/integrations/webhooks" --- A webhook destination delivers your synced bank data straight to your own server. BankSync POSTs a signed JSON payload to your HTTPS endpoint every time a feed syncs, so you can push data into any system you can write a small handler for. There is no field mapping: the payload is a standard, versioned envelope. [![Setting up a webhook destination: picking Webhooks from the destination catalog, entering the endpoint URL, revealing the whsec\_ signing secret shown once, a test delivery returning 200 in 142ms, and the endpoint panel with the recent deliveries table.](https://cdn.banksync.io/videos/webhook-destination-feed.poster.9f085924736e4b13.png)](https://cdn.banksync.io/videos/webhook-destination-feed.b93e77b77369be96.mp4) [Watch: Setting up a webhook destination: picking Webhooks from the destination catalog, entering the endpoint URL, revealing the whsec\_ signing secret shown once, a test delivery returning 200 in 142ms, and the endpoint panel with the recent deliveries table.](https://cdn.banksync.io/videos/webhook-destination-feed.b93e77b77369be96.mp4) > **Before you start:** 'You need: (1) a workspace on a Standard plan or higher (webhooks are part of the developer surface, alongside the API and MCP), (2) an HTTPS endpoint that can receive POST requests, and (3) at least one connected bank. Developers building the receiver should also read the Webhooks developer reference.' ## How it works 1. You connect a **webhook endpoint** (a URL plus a signing secret) from the Integrations tab. 2. You create a **feed** that targets that endpoint, picking the accounts and data type. 3. On every sync, BankSync POSTs a signed JSON event to your URL. Your server verifies the signature and processes the data. One endpoint can receive deliveries from many feeds. ## Step 1: Connect an endpoint ![The Add Connection dialog with a search box and destinations grouped by category: Spreadsheets (Google Sheets), Docs (Notion), Databases (Postgres), and Developer tools, where the Webhooks card reads POST signed JSON to any HTTPS endpoint.](https://cdn.banksync.io/screenshots/destinations/webhook-card.2434f7671d916840.png "Webhooks appears under Developer tools in the Add Connection dialog.") **Connect a webhook endpoint** 1. **Open Add Connection** — From your workspace, go to the Integrations tab and click "Add Connection". 2. **Choose Webhooks** — Under the "Developer tools" group, click "Webhooks" (search "webhook" if you don't see it). 3. **Enter your endpoint URL** — Paste the HTTPS URL that should receive deliveries, e.g. https\://api.yourapp.com/webhooks/banksync. Optionally give it a name and description. 4. **Connect** — Click "Connect endpoint". BankSync generates a signing secret and shows it once. 5. **Copy your signing secret** — Copy the secret (it starts with whsec\_) and store it where your server can read it. You'll use it to verify every delivery. You can reveal or rotate it later from the endpoint's settings. 6. **Send a test event** — Click "Send test event" to POST a sample payload to your endpoint and confirm it's reachable. The result (status code and timing) shows inline. ![The Connect a webhook form: an Endpoint URL field filled with https://api.yourapp.com/webhooks/banksync, an optional Name field, an optional Description field, and Back and Connect endpoint buttons.](https://cdn.banksync.io/screenshots/destinations/webhook-form.8cd7a4e8bd6df3c5.png "The webhook connect form.") > **Your URL must be public HTTPS:** 'BankSync only delivers to publicly reachable https\:// URLs. Endpoints that resolve to private, loopback, or internal addresses (localhost, 10.x, 192.168.x, link-local, cloud metadata) are rejected when you save them, because deliveries are authenticated by signature, not by network location.' ## Step 2: Create a feed to your endpoint Webhook feeds work like any other feed, with one difference: there is no mapping step. Instead, the wizard shows a **payload preview** of the exact event your endpoint will receive. **Create a webhook feed** 1. **New feed** — On the Feeds tab, create a feed and pick your accounts and the data type (transactions, balances, holdings, trades, orders, or loans). 2. **Pick the webhook destination** — In the Destination tab, select your webhook endpoint. 3. **Review the payload** — The Payload tab shows a sample event for your data type, the same envelope production will send. There's nothing to map. 4. **Set a schedule** — Pick how often the feed should sync, then save. ![The feed wizard's Payload tab for a webhook destination, showing a read-only JSON sample of a transactions.delta event with its envelope fields and a data array, and a link to the payload reference.](https://cdn.banksync.io/screenshots/destinations/webhook-payload-preview.ab5c4b4bbf6de7c4.png "The payload preview shown in place of field mapping for webhook feeds.") ## What you receive Each delivery is a JSON envelope with an event `type`, an `apiVersion`, the `feed` and `job` it came from, and a `data` array of rows. Transactions arrive as `transactions.delta` events (new or changed rows); balances, holdings, trades, orders, and loans arrive as `*.snapshot` events (the full current state). A terminal `sync.completed` event marks the end of each run. For the exact envelope, per-data-type field tables, and signature-verification code in several languages, see the [Webhooks developer reference](/docs/api/webhooks-reference). ## Managing an endpoint Open a webhook endpoint from the Integrations tab to manage it. ![A webhook endpoint detail panel: an Active status badge, the endpoint URL with a copy button, a masked signing secret with reveal, copy, and rotate controls, a rotation-overlap note, a Send test event button showing a Delivered (200) in 142ms result, and a Recent deliveries table listing transactions.delta, endpoint.test, and a failed balances.snapshot with status, code, and attempts.](https://cdn.banksync.io/screenshots/destinations/webhook-endpoint-secret.1a218c4d275ee4fb.png "The webhook endpoint detail panel: signing secret, test event, and the delivery inspector.") From this panel you can: - **Reveal or copy the signing secret** (owners and admins only). - **Rotate the secret.** The previous secret keeps verifying for 24 hours so you can roll it without downtime. - **Send a test event** at any time. - **Pause and resume** deliveries. - **Inspect recent deliveries:** event type, status, HTTP code, and attempt count. ## Troubleshooting > **Your endpoint returned 401 / 403:** BankSync authenticates deliveries with a signature, not credentials, so don't require auth on the receiving route. Verify the webhook-signature header against your signing secret instead (see the developer reference). - **Deliveries are retried** on timeouts, 429s, and 5xx responses with exponential backoff. A 4xx (other than 429) is treated as a permanent rejection and isn't retried. - **A 410 Gone response** tells BankSync the endpoint has unsubscribed, so the endpoint is disabled automatically. - **Repeated failures auto-disable the endpoint.** Fix your server, then re-enable it from the endpoint page; the failure count resets. - **Redelivering** is available for test events from the inspector. To re-send feed data, just run the feed again: every event carries a stable `webhook-id`, so your consumer can safely deduplicate. ![A webhook endpoint detail panel in the auto-disabled state: an Auto-disabled status badge with 20 consecutive failures and an error message Endpoint responded with HTTP 500, above the endpoint URL and the rest of the panel.](https://cdn.banksync.io/screenshots/destinations/webhook-endpoint-disabled.067ee60215f0bd6e.png "An endpoint that auto-disabled after repeated failures. Fix the server, then re-enable it.") ## Plan Webhook destinations require a **Standard plan or higher**. If you downgrade below it, your webhook feeds stop delivering until you upgrade again.