Integrations

Tenant Webhooks & n8n

Status: Implemented / plan-gated.

Current outbound events

booking.created
booking.confirmed
session.checkin
session.checkout
order.placed
marketing.broadcast

A tenant-configured n8nWebhookBaseUrl receives JSON POSTs. The service blocks localhost, metadata and private-network destinations and logs recent delivery outcomes.

Management

GET  /api/v1/webhooks/logs
POST /api/v1/webhooks/test
POST /api/v1/webhooks/broadcast

Partner limitation

This is an automation bridge, not yet a fully generalized signed partner-webhook standard. Future external webhooks should add HMAC signing, event versions/IDs, replay, retries, secret rotation and deprecation policy.