Where a tool can post to a URL, no code is needed at either end. Each company has an endpoint per provider:
POST /api/v1/webhooks/{provider}/{company uuid}Generate the URL on the company's Integrations screen. Supported providers include WooCommerce, Shopify, Calendly and Cal.com.
Signatures
Set a signing secret when the provider offers one and every delivery is verified against it. Where a provider offers none, deliveries arrive unverified and are still parsed, because refusing them would break an integration that has no way to comply.
Nothing is thrown away
Every delivery is stored with its headers and its body, whether it parsed or not. One that failed can be replayed through the current parsers once the cause is fixed, so an outage at either end is a delay rather than a hole in the figures.