Webhooks for employers

What webhooks do

JobsAI instantly sends every new candidate application as a secure HTTPS request (the application.received event) to an address you register. The message contains the candidate's name, e-mail and phone, the cover letter, job details and a link to the application detail - the same information as the notification e-mail, just machine-readable. Ideal for connecting n8n, Zapier, Make or your own ATS.

Setup step by step

• On the company overview click Webhooks (API). The feature is available to verified companies only and is managed by owners and administrators.
• Enter the HTTPS address of your system and click Add.
• Store the signing secret - for security reasons it is shown only once.
• Click Verify: we send a test endpoint.verify event to the address and your system must respond with a 2xx status.
• We only deliver to verified, active addresses.

Security

• Every request is signed with HMAC-SHA256. The X-JobsAI-Signature: t=<time>,v1=<signature> header carries a signature computed from <time>.<request body> with your secret - verifying it guarantees the message comes from JobsAI.
• The X-JobsAI-Event-Id header stays the same across repeated deliveries - use it to deduplicate.

Delivery reliability

• If the address does not respond with 2xx, we retry the delivery (6 attempts over roughly an hour), then mark it as failed.
• The Delivery history section shows every delivery including responses; resend a failed delivery with the Resend button.