Yes. Point an outbound webhook at a Zapier catch hook.

How do I verify signatures?

Compute HMAC-SHA256 of the raw body with your endpoint secret and compare to the signature header. Examples are in the docs.

Are webhooks on every plan?

Regex webhooks are included on every plan; outbound webhooks and API actions are included on Growth and Business.

Yes. Point an outbound webhook at a Zapier catch hook.

How do I verify signatures?

Compute HMAC-SHA256 of the raw body with your endpoint secret and compare to the signature header. Examples are in the docs.

Are webhooks on every plan?

Regex webhooks are included on every plan; outbound webhooks and API actions are included on Growth and Business.

Integration

Webhooks: inbound lookups and outbound events

Webhooks are how Threadbox talks to the rest of your stack in both directions. Regex webhooks let a reference number in a message trigger an exact lookup in your system. Outbound webhooks tell your systems what happened in a conversation.

Both are signed, logged and replayable, so integrating is safe and debuggable.

UK/EU hosted
UK GDPR ready
Encrypted at rest and in transit
Companies House 00838986

Last updated 17 September 2026

Setup

1
Regex webhooks: define a pattern and the endpoint to call with the match
2
Outbound webhooks: add an endpoint URL and choose event types
3
Verify HMAC-SHA256 signatures with your per-endpoint secret
4
Inspect deliveries and replay from the dashboard

Read the docs

What you get

Regex webhooks with no LLM in the loop
Events: conversation.*, message.*, lead.created, escalation.*, action.failed
HMAC-SHA256 signatures, retries with backoff, replay
Delivery log with payloads
Works with Zapier, Make, n8n or your own code

Regex webhooks: exact answers for reference numbers

Define a pattern such as an order or consignment number. When a message matches, Threadbox calls your endpoint with the match and returns the response verbatim or via a widget template. No language model rewrites the data.

Outbound events for everything that matters

conversation.created, message.received, lead.created, escalation.triggered and action.failed, among others. Route leads to your CRM, escalations to Slack, failures to your monitoring.

Try it on your own website

Paste your URL. We crawl it and hand you a working agent in minutes. Free plan, no card.

Built for reliability

Payloads are HMAC-SHA256 signed with per-endpoint secrets. Failed deliveries retry with backoff; the dashboard shows every attempt and lets you replay.

FAQ

Frequently asked questions

Actions let the model decide when to call your API with extracted parameters. Regex webhooks fire deterministically on a pattern match with no model involved.

Keep exploring

Wire Threadbox into your stack

Signed, logged, replayable.

Build my agent free Book a demo

UK/EU hosted
UK GDPR ready
Encrypted at rest and in transit
Companies House 00838986