Outbound webhooks
- Click Add webhook.
- Enter an HTTPS URL and select events (new requests, comments, votes, or published changelog entries).
- Save, then copy the signing secret (
pe_whsec_…) — shown once. - Use Send test and check the Events log.
POST with headers such as:
X-PE-Signature— HMAC-SHA256 of the raw bodyX-PE-Event— event keyX-PE-Delivery-Id— delivery id
Inbound webhooks
- Open the Inbound tab → Add webhook.
- Name the endpoint, pick a default board and status, and copy the receive URL.
- Send a test POST from your tool so Echo can capture a sample payload.
- Map email and title (required), plus optional description and name fields.
- Finish setup — later POSTs create requests automatically.
Security tips
- Keep signing secrets and inbound URLs private.
- Prefer HTTPS endpoints you control.
- Disable or delete unused webhooks.

