Every event type
Delivery, open, click, bounce, complaint, unsubscribe, form submission, trigger action, and workflow step can each fire a webhook. Subscribe an endpoint to exactly the events it cares about and ignore the rest.
Developer
Mumara ONE fires HMAC-signed webhook events for delivery, opens, clicks, bounces, complaints, unsubscribes, form submissions, and automation steps — pushed to your endpoint the instant they occur, with retry on failure. The push counterpart to the REST API.
POST https://acme.example/hooks
X-Signature: hmac-sha256 ✓
{ "event": "click", "url": "..." }
How it works
Delivery, open, click, bounce, complaint, unsubscribe, form submission, trigger action, and workflow step can each fire a webhook. Subscribe an endpoint to exactly the events it cares about and ignore the rest.
Every payload is HMAC-signed. Your receiver verifies the signature with a shared secret before acting, so you know the event genuinely came from Mumara and wasn't forged or tampered with in transit.
If your endpoint is briefly down, Mumara retries with exponential backoff rather than dropping the event — so a momentary blip on your side doesn't cost you data.
Event types
From delivery status to engagement to automation steps — point each endpoint at the events that matter to it, and route them wherever your stack makes decisions.
What it replaces
Repeatedly asking the API "anything new?" is wasteful and always lags. Webhooks push the event the instant it happens, so your systems learn in real time.
An unsigned webhook could be forged by anyone who learns the URL. HMAC signing lets your receiver confirm each payload genuinely came from Mumara.
A webhook that fires once and gives up loses data when your endpoint hiccups. Exponential-backoff retries make sure the event still lands.
If opens and clicks only live in the dashboard, your CRM is blind. Webhooks push them to wherever your team actually acts on them.
What teams wire up
“We pipe click and bounce events straight into our CRM over webhooks, so sales sees engagement in real time and dead contacts get flagged automatically. The HMAC signature was the dealbreaker detail — our security team wouldn't accept an unsigned callback, and here verifying it was a few lines.”
Verified review
Mumara ONE customer
Common questions
Delivery, open, click, bounce, complaint, unsubscribe, form submission, trigger action, and workflow step. You subscribe each endpoint to the specific event types it needs rather than receiving everything.
Every payload is HMAC-signed. Your receiver computes the signature with the shared secret and compares it — if it matches, the event genuinely came from Mumara and wasn't tampered with. Reject anything that doesn't verify.
Mumara retries with exponential backoff rather than dropping the event, so a brief outage on your side doesn't lose data. Once your endpoint recovers, the queued events are delivered.
They're two halves of a real-time integration: the REST API lets you pull data and take actions, while webhooks push events to you as they happen. Together they cover both directions without polling.
Webhooks are available on the Pro and Business tiers of Mumara ONE.
Related
The pull counterpart — query data and take actions; webhooks push events back.
Read moreDelivery-lifecycle events (received, queued, delivered, bounced) stream via webhook.
Read moreOpen, click, and complaint events push to your stack the moment they occur.
Read moreA workflow can call your external systems via a webhook node mid-journey.
Read moreMumara ONE · Webhooks
HMAC-signed events for delivery, engagement, and automation — pushed to your endpoint in real time, with retries so nothing is lost. Pro and Business tiers.