Webhooks & API
Get notified when end users sign up, and provision accounts from your own systems with the External API.
Webhooks & API
Beta
Storefronts are currently in beta.
A Storefront's Webhooks page is where your systems and FormWise meet: an outbound signup webhook, and the org API keys for the inbound External API.
Signup webhook
POSTs a notification to your endpoint once per end user, the first time they sign in to this Storefront - the moment to sync the new contact into your CRM or kick off your own onboarding.
- On the Storefront's Webhooks page, enter your endpoint URL and enable the webhook.
- On first enable, FormWise generates a signing secret, shown exactly once - store it like a password.
- Use Send test to fire a test delivery at your endpoint.
Verifying deliveries
Every delivery is signed so you can verify it came from FormWise:
X-FormWise-Timestamp- unix seconds when the request was signed.X-FormWise-Signature-sha256=<hex>, an HMAC-SHA256 over"{timestamp}.{raw body}"using your signing secret.
Recompute the HMAC over the exact raw body, compare with a constant-time comparison, and reject stale timestamps to prevent replays. Failed deliveries are retried automatically with increasing backoff.
Provisioning API
The same page hosts the Provisioning API card:
- Create and revoke organization API keys (
fw_live_..., secret shown once). Keys are org-wide - they work across every Storefront. - See the endpoint shape, your plan IDs, and a request example.
With a key, your systems can create end-user accounts, assign plans and access grants, and read usage - the bring-your-own-billing recipe: charge the customer in your own stack, then POST /api/v1/end-users, and they sign in with their email. Full reference: API Reference.