Webhook Sink

The webhook integration POSTs the full report to your URL after every successful run. Use it to:

Build your own dashboard
Forward into a Slack/Telegram/Discord bot you already maintain
Trigger downstream automations (Zapier, n8n, Cursor agents)
Archive runs into your own database

Setup

curl -X PUT https://api.appeeky.com/v1/cofounder/integrations/webhook \
  -H "X-API-Key: $APPEEKY_KEY" \
  -d '{
    "credentials": { "url": "https://your-server.com/cofounder-hook" },
    "integrationConfig": { "secret": "shared-secret-for-verification" }
  }'

The endpoint is tested before saving — a test.connection event is POSTed and we expect a 2xx/3xx response.

Enable

PUT /v1/cofounder/preferences
{ "enabledIntegrations": ["webhook"] }

Payload — `report.created`

Every successful run fires:

POST https://your-server.com/cofounder-hook
Content-Type: application/json
User-Agent: Appeeky-Cofounder/1.0
X-Cofounder-Secret: <your secret if configured>

{
  "event": "report.created",
  "ownerEmail": "you@example.com",
  "appId": "6479581124",
  "reportId": "uuid",
  "timestamp": "2026-05-02T08:00:00Z",
  "report": { ...full DailyReport object... }
}

Payload — `webhook_post` action

When the LLM proposes a webhook_post action (rare, used for narrative events):

{
  "event": "competitor.major_move",
  "summary": "Acme shipped v3.0 with AI subtitle and dropped price 30%",
  "timestamp": "2026-05-02T08:00:00Z"
}

Verifying the secret

If you set secret, every request includes it as X-Cofounder-Secret. Compare it server-side:

app.post("/cofounder-hook", (req, res) => {
  if (req.headers["x-cofounder-secret"] !== process.env.COFOUNDER_SECRET) {
    return res.status(401).end();
  }
  // process req.body
  res.status(200).end();
});

The secret is stored in cofounder_integrations.config and never exposed via the API.

Failure handling

HTTP 4xx/5xx → logged with last_error on the integration row, but the run still completes
Network failure → logged, run still completes
We don’t retry — your endpoint is responsible for being available, or queue your own retry layer

Disable

PUT /v1/cofounder/preferences { "enabledIntegrations": [] }

(remove "webhook" from the array). To delete credentials entirely:

DELETE /v1/cofounder/integrations/webhook

Get Started

Concepts

Knowledge Base

Capabilities

Integrations

API Reference

Setup

Enable

Payload — `report.created`

Payload — `webhook_post` action

Verifying the secret

Failure handling

Disable

​Setup

​Enable

​Payload — report.created

​Payload — webhook_post action

​Verifying the secret

​Failure handling

​Disable

Setup

Enable

Payload — `report.created`

Payload — `webhook_post` action

Verifying the secret

Failure handling

Disable