Send VeraDial Webhooks to Make, n8n, or Your Own App
Vera Plus can send a signed HTTPS request when Vera screens a call, confirms an appointment, receives a voicemail, or sends an AI text reply. Point the endpoint at Make, n8n, or your own service; VeraDial handles durable delivery and retries.
By Graham Thomson · Updated August 9, 2026
Create the receiving URL first
Start in the destination tool. Create a custom webhook in Make, a Webhook trigger in n8n, or a public HTTPS route in your own application, then copy its complete URL.
- The URL must use HTTPS and be reachable from the public internet.
- Private, loopback, link-local, reserved, and cloud-metadata destinations are rejected.
- VeraDial does not follow redirects, so use the final receiving URL.
- For Zapier, use the native VeraDial app instead of creating a custom Catch Hook.
Create the endpoint in VeraDial
Sign in at app.veradial.com and open Dashboard → Integrations, or use Manage Vera → Webhooks & Zapier in the mobile app. Choose Add endpoint and paste the receiving URL.
- Choose All lines or one exact VeraDial phone line.
- Choose call events, voicemail events, AI SMS replies, or a combination. Call events include screened calls and confirmed appointments.
- Enable content only if the destination truly needs call transcripts or voicemail text.
- Copy the whsec_ signing secret immediately. It is shown in full only once.
Verify every signature
Each request includes X-VeraDial-Signature in the form t=<unix-seconds>,v1=<hex digest>. Compute HMAC-SHA256 over the exact string <timestamp>.<raw request body> using the endpoint's whsec_ secret, then compare your hex digest with v1 using a constant-time comparison.
- Verify the raw bytes received from the network; do not parse and re-serialize JSON before calculating the digest.
- Reject timestamps outside a short replay window, such as five minutes.
- Confirm the computed and presented digests have the same length before a constant-time comparison.
- Never put the signing secret in a client app, URL, log, or source repository.
Test, map, and activate
Use Send test from VeraDial before depending on a workflow. The test is signed exactly like a live delivery, so it can validate both network reachability and your signature code.
- Map the stable event id, kind, occurredAt, account, line, and data fields in the destination.
- Use kind to distinguish call.screened, appointment.booked, voicemail.received, and sms.reply_sent.
- Use line.id as the stable identifier; phoneNumber and label are event-time display values.
- Return any 2xx response only after your receiver has safely accepted the event.
Retries, duplicates, and privacy
Webhook delivery is at least once. VeraDial retries failures with backoff and stops after six total attempts; an endpoint is automatically paused after fifteen consecutive failed deliveries.
- Store the event id before performing a non-repeatable action so a retried delivery cannot create a duplicate side effect.
- Resume an auto-paused endpoint after the receiver is healthy, then send another test.
- Transcripts and voicemail text are included only when Include content is enabled; recordings are never sent.
- Rotating the signing secret invalidates the old secret immediately, so update the receiver before resuming deliveries.
FAQ
Why does VeraDial reject my webhook URL?
The destination must be a final, publicly reachable HTTPS URL. VeraDial blocks internal and reserved network addresses and does not follow redirects in order to prevent server-side request forgery.
Why does signature verification fail even though the secret is correct?
The most common cause is calculating the HMAC over parsed or re-formatted JSON. Preserve the exact raw request body, prepend the timestamp and a period, then calculate HMAC-SHA256 and compare against v1.
Can VeraDial send full transcripts to Make or n8n?
Yes, for custom endpoints when you explicitly enable Include content. Leave it off unless the workflow needs that sensitive content. VeraDial never sends audio recordings through this webhook contract.
Should I use a custom webhook for Zapier?
Use VeraDial's native Zapier app for its instant triggers and line picker. Custom signed webhooks are the better fit for Make, n8n, or software you operate yourself.
Hear Vera in action.
Play a short sample call, follow the transcript, and move into a personalized live demo when you're ready.