Integration Pro

Webhooks for every comment

If your tool isn't on the list, webhooks connect it. StiqNote sends a signed JSON request to your endpoint when something happens, and you do the rest: Zapier, Make, n8n, a serverless function, your own backend.

On Pro and Agency. Try it free for 14 days, no card.

Events

  • comment.created: new feedback
  • comment.replied: a reply in a thread
  • comment.status_changed: a status changed
  • comment.resolved: a thread was resolved

Pick the events per endpoint. Private comments are never sent.

What's in a delivery

A POST with a JSON body:

{
  "id": "…",
  "event": "comment.created",
  "created_at": "2026-09-30T09:12:44Z",
  "team": { … },
  "page": { … },
  "thread": { … },
  "comment": { … },
  "author": { … },
  "links": { … }
}

Status events also carry status and previous_status.

Headers and signature

Header What it is
StiqNote-Event The event name
StiqNote-Delivery A delivery id, the same on retries
StiqNote-Timestamp When it was sent
StiqNote-Signature t=<unix time>,v1=<signature>

The signature is an HMAC-SHA256 of <t>.<body> with your endpoint's secret, as hex. Check it before you trust a delivery, and reject old timestamps.

Retries and the delivery log

  • A delivery waits up to 10 seconds for your answer. Redirects aren't followed.
  • If your endpoint answers with a 5xx or 429, or can't be reached, StiqNote tries again after 1, 2, 4 and 8 minutes. A 4xx fails straight away.
  • Each endpoint keeps a log of its last 20 deliveries. Open an endpoint to see them, and click Send again on a failed one.
  • Send a test event (in the endpoint's ••• menu) to check your endpoint before real feedback comes in.

Set it up

  1. In the StiqNote sidebar, open Settings → Integrations and click Connect next to Webhooks.

  2. Add an endpoint: an https address on port 443.

  3. Copy the signing secret (whsec_…). It's shown once. Lost it? Choose New signing secret in the endpoint's ••• menu.

  4. Tick the events you want.

Use the switch on an endpoint to pause it, or Remove endpoint in its ••• menu.

Rules for endpoints

To keep webhooks from being used to reach private networks, endpoints must be public https addresses. Local, private and internal addresses are refused, and so are addresses with a username or password in them.

Questions

Which plan do I need?

Pro or Agency.

Can I receive webhooks on localhost while I build?

Not directly. Use a tunnel with a public https address, or a request inspector, while you develop.

On Pro and Agency. Every integration comes with Pro: GitHub, Linear, Jira, Asana, ClickUp, Trello, Notion, Slack, Microsoft Teams, webhooks and the MCP server.

See pricing

Stop sending screenshots in Slack

Pin the feedback where it belongs. Free to start, with 14 days of Agency for your first team.