Yada's inbound lead webhook receives server-side submissions from a website, Zapier, Make, or custom automation and creates or updates contacts.
Generate credentials
Open Settings → Integrations → Webhooks.
In Credentials, copy the workspace-specific Endpoint URL.
Select Generate secret, or enter a custom secret of at least 16 characters and save it.
Copy the signing secret and store it only in a trusted server or automation secret store.
Use the same control to rotate an exposed secret. A rotated secret immediately replaces the previous credential.
Build the request
Send JSON with an HTTPS POST to the displayed endpoint. Include a stable submission id, the displayed workspace userId, and contact fields such as first name, last name, email, phone, source, and tags. The integration page includes an example payload.
Sign and de-duplicate the delivery
x-webhook-timestamp: the current Unix timestamp in seconds.
x-webhook-signature: the HMAC signature produced from the exact raw request body using the configured secret and the request contract shown in Yada.
x-idempotency-key: the stable submission ID, recommended for safe retries.
Test the connection
Submit one test lead and find it under Marketing → Contacts. Retry the same request with the same idempotency key and confirm it does not create a second contact.
Security: Never put the signing secret in browser JavaScript. Send only data you are authorized to collect and log delivery IDs instead of raw guest details.