Webhooks

Receive a signed HTTP POST when a task, project, or comment changes in a workspace.

A webhook endpoint is a URL Done Bear POSTs to whenever something in a workspace changes. Every change counts, whichever surface made it: the web app, iOS, the CLI, the MCP server, the chat agent, or the server's own repeat scheduler. The stream comes from the same server-sequenced log that keeps the clients in sync, so an event is never skipped and never sent out of order.

Create an endpoint

Endpoints are managed by workspace owners and admins. Use a Supabase JWT or an API key with the admin scope.


curl -X POST https://api.donebear.com/api/webhooks \
  -H "Authorization: Bearer $DONEBEAR_TOKEN" \
  -H "Content-Type: application/json" \
  --data '{
    "workspaceId": "<workspace-id>",
    "url": "https://example.com/hooks/donebear",

Published with Blode.md

Webhooks

Receive a signed HTTP POST when a task, project, or comment changes in a workspace.

Create an endpoint

Endpoints are managed by workspace owners and admins. Use a Supabase JWT or an API key with the admin scope.


curl -X POST https://api.donebear.com/api/webhooks \
  -H "Authorization: Bearer $DONEBEAR_TOKEN" \
  -H "Content-Type: application/json" \
  --data '{
    "workspaceId": "<workspace-id>",
    "url": "https://example.com/hooks/donebear",

Published with Blode.md

Type	When
`task.created`	A task was added.
`task.updated`	Any other change to a task.
`task.completed`	A task went from open to done.
`task.archived`	A task was moved to Trash.
`task.deleted`	A task was removed for good.
`project.created`	A project was added.
`project.updated`	Any other change to a project.
`project.completed`	A project was marked done.
`project.archived`	A project was archived.
`project.deleted`	A project was removed for good.
`comment.created`	A comment was posted.
`comment.updated`	A comment was edited.
`comment.deleted`	A comment was removed.
`endpoint.test`	You asked for a test delivery. Always sent, never filtered.

Header	Value
`webhook-id`	The event id.
`webhook-timestamp`	Unix seconds when this attempt was signed.
`webhook-signature`	One or more `v1,<base64>` entries separated by spaces.

Webhooks

Create an endpoint

Webhooks

Create an endpoint

Event types

The payload

Verify the signature

Retries and disabling

Rotate the secret

Test an endpoint

Order and duplicates