Webhooks

Push company signals to your workflow.

Watch a company, register an HTTPS destination and receive signed signal payloads when its registry record changes.

1. Register a destination

curl -X POST https://api.truingdata.com/v1/clay/webhooks \
  -H "content-type: application/json" \
  -H "x-api-key: proj_live_..." \
  -d '{"webhook_url":"https://example.com/truing","signal_type":"all"}'

The response includes a signing secret. Store it when it is shown.

2. Watch a company

curl -X POST https://api.truingdata.com/v1/watchlist \
  -H "content-type: application/json" \
  -H "x-api-key: proj_live_..." \
  -d '{"company_number":"01234567"}'

3. Verify each delivery

Truing sends these headers:

x-project-node-event
x-project-node-timestamp
x-project-node-signature

hex(hmac_sha256(secret, timestamp + "." + JSON.stringify(payload)))

Reject signatures that do not match. Also reject old timestamps to reduce replay risk.