Wp Admin Webhooks

⚙️ Endpoint Settings

Webhook URL

We will send POST requests to this URL when events occur.

Triggers

post.updated post.published plugin.installed theme.updated user.registered backup.completed

Signing Secret

wp_sec_9x82m4k1p7q3r5t0

Use this secret to verify webhook signatures in your server.

🔐 Security & Payload

All webhooks are signed using HMAC-SHA256. Verify the X-WpAdmin-Signature header against the payload.

# Example payload structure
{
  "event": "post.published",
  "timestamp": "2025-01-15T10:30:00Z",
  "site_id": "wp_8492mx",
  "data": {
    "post_id": 1284,
    "title": "New Product Launch",
    "author": "admin"
  }
}

<?php
// Verify WpAdmin webhook signature
$payload = file_get_contents('php://input');
$secret = 'wp_sec_9x82m4k1p7q3r5t0';
$signature = $_SERVER['HTTP_X_WPADMIN_SIGNATURE'];

$expected = hash_hmac('sha256', $payload, $secret);

if (hash_equals($expected, $signature)) {
    processWebhook(json_decode($payload));
} else {
    http_response_code(403);
}

// Express.js verification middleware
const crypto = require('crypto');

app.post('/webhook', (req, res) => {
  const secret = 'wp_sec_9x82m4k1p7q3r5t0';
  const sig = req.headers['x-wpadmin-signature'];
  const body = JSON.stringify(req.body);
  
  const hmac = crypto.createHmac('sha256', secret)
    .update(body).digest('hex');

  if (hmac !== sig) return res.status(403).send('Invalid signature');
  
  handleEvent(req.body);
  res.status(200).send('OK');
});

📊 Recent Deliveries

ID	Status	Event	Endpoint	Retries	Delivered At	Actions
wkh_8a92b3c4	✓ Success	post.published	https://api.yoursite.com/...	0	2 mins ago	View Log
wkh_7f21d8e9	✓ Success	backup.completed	https://api.yoursite.com/...	0	14 mins ago	View Log
wkh_6e40c7d2	✗ Failed	plugin.updated	https://api.yoursite.com/...	3/3	1 hr ago	Retry
wkh_5d39b6a1	✓ Success	user.registered	https://api.yoursite.com/...	1	2 hrs ago	View Log

Webhook Configuration

⚙️ Endpoint Settings

🔐 Security & Payload

📊 Recent Deliveries