Webhooks

Webhooks let Meridian push notifications to your systems when important process events occur — case deviations, SLA breaches, conformance threshold crossings, and more.

Configuring a webhook

Navigate to Settings → Webhooks in the dashboard. Add your endpoint URL and select the event types you want to receive. Meridian will send a POST request to your endpoint for each matching event.

Webhook payload

{
  "id": "wh_01ABCDEF",
  "type": "case.deviated",
  "projectId": "proj_xxxx",
  "timestamp": "2026-02-10T09:20:00Z",
  "data": {
    "caseId": "INV-2026-001",
    "conformanceScore": 0.61,
    "deviationActivities": ["Approval Skipped"],
    "attributes": { "amount": 15000 }
  }
}

Verifying signatures

Every webhook includes an X-Meridian-Signature header. Verify it against your webhook secret to ensure the request originated from Meridian.

import { createHmac } from 'crypto'

function verifyWebhook(body: string, signature: string, secret: string): boolean {
  const expected = createHmac('sha256', secret).update(body).digest('hex')
  return `sha256=${expected}` === signature
}