Automation · Webhooks & API
Internal betaIn by webhook, out by HTTP.
Signed webhooks start workflows from any system; HTTP steps call any API and bring the answer back into the record. The whole lifecycle has a REST API.
- HMAC-signed inbound webhooks
- GET, POST, PUT, PATCH, DELETE steps
- A REST API for the lifecycle
Inbound
Signed, checked, never run twice.
Each endpoint has an HMAC secret you can rotate. Requests outside the replay window, over the rate limit or with a bad signature are refused; a repeat is recognised by its key and marked duplicate.
Outbound
Call any API, keep the answer.
HTTP steps fill their headers, query and body from the run, send it, and map fields from the response back onto the record.
In plain numbers
Signed, rate-limited, and capped.
- replay window for signed requests
- 300 s
- replay window for signed requests
- default limit per endpoint
- 60/min
- default limit per endpoint
- payload cap
- 1 MB
- payload cap
- HTTP methods for outbound steps
- 5
- HTTP methods for outbound steps
The rest of Automation
Where to go next.
- OverviewDraw a workflow; it runs inside Fyboard.
- BuilderSteps, conditions, joins; validate and test.
- AnalyticsRuns, success, time — and every run's timeline.
- Deadlines & escalationApproval timeouts, escalation, delays.
- Starting points29 module operations that wait on a workflow.
- Use casesLeave, purchase orders, contracts, budgets.
- PricingPlans from billing's catalogue.
Questions
Asked and answered.
Is Automation available now?
It's on internal beta, by invitation. Workflows run inside Fyboard modules — 29 operations across People, Materials, AlphaCore, Projects and Finance can wait on one; Materials, Projects and Finance themselves are still in the pipeline.
Are there app connectors, like Slack?
Not yet. Use an HTTP step to call a tool's API, or a webhook to receive from it.
How are inbound webhooks secured?
With an HMAC-signed secret per endpoint, a 300-second replay window, a rate limit and a 1 MB payload cap.
Automation
Wire it to the rest.
Point a webhook at a workflow, or call out from one.