Webhooks reference

Events: ping, job.created, job.released, job.started, job.completed, job.closed, job.cancelled, sales_order.confirmed, purchase_order.received, shipment.shipped, invoice.issued, invoice.paid, vendor_bill.approved, ncr.opened, ncr.closed.

Delivery: POST <your url> with

Content-Type: application/json
User-Agent: ZudoWorks-Webhooks/1.0
X-Zudo-Event: job.released
X-Zudo-Delivery: <uuid>
X-Zudo-Signature: sha256=<hex HMAC-SHA256 of the raw body, keyed with the endpoint secret>

{
  "id": "4f6c…",
  "event": "job.released",
  "created_at": "2026-10-18T09:12:44.000Z",
  "data": {
    "id": "…",
    "job_no": "JOB-000045",
    "item_code": "LC-FRAME",
    "status": "released",
    "quantity": "10",
    "actor": "Pat Owner"
  }
}

Verify the signature before trusting the body; answer 2xx quickly. Deliveries are fire-and-forget (no retries) and are metered against the plan; a paused endpoint (active: false) receives nothing. Target URLs must be HTTPS and public (private / loopback addresses are refused).

Last updated 2026-11-03