Webhook Console

BizScout → Legacy.ai · inbound webhook simulator & HMAC signer

Not sent yet

Legacy.ai Base URL

Webhook Signing Secret (BIZSCOUT_WEBHOOK_SECRET)

APIM Subscription Key (Ocp-Apim-Subscription-Key)

This simulates BizScout calling Legacy.ai's webhook endpoints — the reverse direction from the Listing API console. Paths below follow the OpenAPI spec (/api/bizscout/...); the earlier PDF used /bizscout/webhook/... and listed status-change as PATCH instead of POST — worth confirming which is current with the backend team.

Build Request

Endpoint

POST /api/bizscout/inquiry

event: buyer_inquiry.created

Request Body (JSON)

HMAC Signing

Timestamp

waiting for send…

Signed message = timestamp . raw_body

—

HMAC_SHA256( secret, message )

—

X-BizScout-Signature header

—

Request Sent

Nothing sent yet. Configure the request on the left and hit Send.

Response

Response will appear here once a request is sent.

Complete flow — from click to signature verification

Pick webhook & edit payload

Choose inquiry, status-change, or set-key; sample JSON loads automatically.

Build message

timestamp + "." + raw_body, exactly as it will be sent.

Sign with HMAC-SHA256

Keyed with the webhook secret, output as a hex digest.

Send & verify

Header is attached and Legacy.ai recomputes it on receipt.