Authorization: Bearer your_workspace_api_key
Inbound endpoint
Workspace-scoped sync API
Content-Type: application/json
Inbound events
Supported sync payloads
{
"event": "contact.upsert",
"source": "hubspot",
"external_id": "crm-contact-42",
"payload": {
"email": "[email protected]",
"full_name": "Buyer Example",
"custom_fields": {
"plan": "Pro",
"lifecycle_stage": "lead"
}
}
}
{
"event": "conversation.note",
"source": "salesforce",
"payload": {
"session_key": "abc123session",
"note": "Customer already has an open renewal opportunity."
}
}
Webhook signatures
Verify outbound deliveries
X-VorinChat-Event: message.created
X-VorinChat-Delivery: uuid
X-VorinChat-Timestamp: unix_seconds
X-VorinChat-Signature: sha256=...
The signature is computed over `timestamp + "." + raw_body` using the webhook secret shown inside the staff integrations hub.
Outbound event catalog
What external systems can react to
WordPress
Ready now
Each website chat can export a ready WordPress plugin zip with the exact loader URL and widget key provisioned.
Shopify
Theme-layer path today
Use the generic loader inside a Custom Liquid block or the theme footer while the deeper app layer is still evolving.
Automation bridges
Webhook-first path
Make, Zapier-style relays, and custom middleware can consume signed events without needing direct database access.