# Webhook Destination Config Reference

Webhook sends each event, unmodified, to an endpoint you own. For request mapping, authentication modes, or batching, use HTTP Webhook instead.

In a Webhook destination spec:

Sample configuration

yaml 
version: rudder/v1
kind: destination
metadata:
  name: events-webhook-prod
spec:
  id: events-webhook-prod
  display_name: Events Webhook Production
  type: webhook
  definition_version: 1
  enabled: true
  config:
    webhook_url: https://hooks.example.com/rudderstack
    webhook_method: POST
    headers:
      - from: X-Signing-Key
        to: "{{ .WEBHOOK_SIGNING_KEY }}"
      - from: X-Environment
        to: "{{ .WEBHOOK_ENVIRONMENT }}"

    connection_mode:
      web: cloud
      cloud: cloud
    consent_management:
      web:
        - provider: oneTrust
          consents:
            - analytics

The above example sets two custom headers, and supplies both values through variables because every header value is a secret — see Headers.

Config keys

config accepts only the keys listed below. The shared config key rules cover unknown keys, defaults, and immutability.

Endpoint

webhook_url

Required

Type: string

Description: Endpoint RudderStack sends events to.

Notes:

  • Must be a public domain URL: http or https, at least one dot-separated label followed by an alphabetic top-level domain, an optional port, and an optional path.
  • localhost addresses and <name>.ngrok.io addresses are rejected.
  • A {{ path || fallback }} template is accepted in place of a literal.
To change the path per event, use a transformation — see Add dynamic path to base URL.

webhook_method

Type: string

Default value: POST

Description: HTTP method of the outgoing request.

Notes:

  • One of POST, PUT, PATCH, GET, or DELETE.

Headers

In this destination, from is the header name and to is its value. That’s the reverse of HTTP Webhook’s headers, where to is the name.

Swapping them doesn’t fail validation — it sends a header named after your value.

headers

Type: array of objects

Description: Custom headers added to every request. Values that aren’t strings are stringified before they’re set.

Notes:

  • from — header name, for example content-type.
  • to — header value, for example application/json. Secret — see Secrets.
  • Each is at most 1000 characters, and must not contain line breaks. A {{ path || fallback }} template is accepted in place of a literal.

RudderStack adds user-agent: RudderLabs and content-type: application/json to POST and PUT requests on its own.

yaml 
headers:
  - from: X-Signing-Key
    to: "{{ .WEBHOOK_SIGNING_KEY }}"

To set a header from the event itself, use a transformation — see Add dynamic header to events.

Per-source keys

Both keys are objects keyed by the local source type — the tokens listed under Source types. A key naming a source type this destination doesn’t support fails validation.

connection_mode

Type: object

Description: Maps each source type you connect to the mode its events reach the endpoint in, using the modes in Source types.

Notes:

  • An entry is required for each source type you connect — see Connect a source.
yaml 
connection_mode:
  web: cloud
  cloud: cloud

Source types

Webhook accepts events from these source types in the mentioned connection modes:

Source type Connection mode
android cloud
android_kotlin cloud
ios cloud
ios_swift cloud
web cloud
unity cloud
cloud cloud
react_native cloud
flutter cloud
cordova cloud

Every source type is cloud only — events reach the endpoint from RudderStack’s servers, never in device mode.

The dashboard additionally offers Webhook to AMP, Shopify, and Reverse ETL sources. Rudder CLI doesn’t manage those connections, so amp, shopify, and warehouse are invalid here.

Connect a source

An event stream connection to this destination is checked against two rules at validate time.

The source’s type must be supported. A source’s type resolves to one of the tokens above before the check — a JavaScript source resolves to web, and webhook and server-side SDK sources resolve to cloud. An unsupported type reports:

destination 'events-webhook-prod' (type 'webhook') does not support source 'my-source':
source type 'amp' is not among supported source types: android, android_kotlin, ...

The destination config must carry a connection_mode entry for that source type. This lives on the destination spec, not on the connection spec. Without it:

destination 'events-webhook-prod' config has no 'connection_mode' entry for source type 'web'

Webhook needs no additional config keys to connect a source of any type.

Secrets

Every headers entry’s to value — the header value — is secret. Write each as a {{ .VAR }} reference and supply the value at apply time:

yaml 
config:
  headers:
    - from: X-Signing-Key
      to: "{{ .WEBHOOK_SIGNING_KEY }}"
bash 
export RUDDER_WEBHOOK_SIGNING_KEY="..."
rudder-cli apply

# or
rudder-cli apply --var-file secrets.vars.yaml

Note that:

See How to Use Variable Substitution in Rudder CLI.

See more