Back to Blog
Features Integrations Developer Tools

Webhooks: Real-Time Booking Events for Your Systems

Resvly Team
2026-07-06
4 min read
Webhooks: Real-Time Booking Events for Your Systems

Your booking data shouldn't be stuck inside Resvly. With the new Webhooks app in the Marketplace, every confirmed booking, cancellation, walk-in, and enquiry can push a real-time, signed notification straight to your own systems - your CRM, your Slack channel, your internal dashboard, or a custom automation you build yourself.

What Are Webhooks, in Plain English?

Instead of your systems repeatedly asking Resvly "did anything happen yet?", a webhook flips the model around: Resvly tells you the moment something happens. You give us a URL, we send a small JSON message to it the instant a booking is created, cancelled, rescheduled, or one of several other events occurs. No polling, no delays, no extra API calls on your end.

Eight Events You Can Subscribe To

You choose exactly which events matter to your business - subscribe to all of them or just the ones you need.

Bookings

  • booking.created - a new booking is confirmed, single or group, remote or in-person, including walk-ins that convert to a booking
  • booking.cancelled - a booking is cancelled by the customer, the provider, or the system
  • booking.rescheduled - a provider or staff member moves a booking to a new date or time
  • booking.checked_in - a customer checks in for their appointment via your check-in link

Walk-Ins & Enquiries

  • walkin.confirmed - a customer verifies their email and joins the live walk-in queue
  • walkin.cancelled - a walk-in entry is cancelled, as a no-show, or because the queue closed
  • walkin.verification_expired - a kiosk join confirmation link expires unclicked (5-minute window)
  • provider.contact_request - a customer submits your public contact/enquiry form

Every Payload Is Signed, So You Know It's Really Us

Anyone can find your webhook URL if they try hard enough, so every request Resvly sends includes a Resvly-Signature header built from an HMAC-SHA256 hash of the timestamp and the raw payload, using a secret key only you and Resvly know. Verify it on your end and you can be certain the request genuinely came from Resvly and hasn't been tampered with in transit.

🔐 Replay protection built in: The signature encodes the send time, so your verification code can reject anything older than a few minutes - even if someone captured and replayed an old request.

You don't have to work any of this out from scratch. The Docs tab inside the Webhooks app ships with ready-to-paste signature verification code in PHP, Node.js, Python, Ruby, and Go, so your team can wire up a receiver in minutes.

Reliable Delivery, Even When Your Server Has a Bad Moment

If your endpoint is briefly down, slow, or returns an error, Resvly doesn't just give up. Failed deliveries are automatically retried up to five times, with increasing delays spread across roughly twenty minutes, giving transient issues time to resolve themselves.

Every attempt, successful or not, shows up in the Recent Deliveries tab - full payload, response status, and response body included - so you can see exactly what was sent and how your endpoint responded. If something did go wrong on your side, a one-click Resend button lets you replay any delivery once your endpoint is back up, no need to wait for a new booking to test your fix.

Secure by Design

  • Endpoint URLs must use HTTPS in production, so your payloads never travel in plain text
  • Resvly blocks endpoints that resolve to private, internal, or loopback addresses, including cloud metadata endpoints, to keep your infrastructure safe from misconfiguration
  • That validation runs again at send time, not just when you save the URL, closing the door on a DNS record that changes after the fact

Getting Started Takes Minutes

Webhooks is available on the Professional and Enterprise plans. From your Marketplace, install the Webhooks app, then:

  1. Paste your endpoint URL under the Settings tab and save
  2. Tick the events you want to receive and save again
  3. Copy your signing secret and drop it into the verification snippet from the Docs tab
  4. Trigger a real event (or resend a past one) and watch it land in Recent Deliveries

That's it - your systems now hear about every booking the moment it happens, with no polling and no guesswork.

Ready to connect Resvly to your own systems?

Upgrade to Professional, install the Webhooks app from your Marketplace, and start receiving real-time, signed events today.