All integrations

Webhooks and an API for your own systems

Every new lead goes as a POST request to your address. The order's status and the sale amount can be sent back through the API.

Create account Live demo

Webhooks and API keys are available from the Flow plan.

What goes to your address

The request is sent right after the lead. Spam isn't sent.

eventAlways lead.created.
leadThe lead's id, name, phone, status, A/B test version, UTM tags and time.
siteThe site's id, its name and address.
X-Tersby-SignatureAn HMAC-SHA256 signature of the request body, if you set a secret.

What the request looks like

Check the signature with your secret to accept leads only from Tersby.

POST https://crm.example.com/tersby
X-Tersby-Signature: 5f2a9c…

{
  "event": "lead.created",
  "lead": {
    "id": "cm8f3a2k…",
    "name": "Maryna Petrenko",
    "phone": "+380 67 482 19 03",
    "status": "new",
    "variant": "a",
    "utm": { "utm_source": "facebook", "utm_campaign": "bosch_x4" },
    "createdAt": "2026-09-30T11:32:08.000Z"
  },
  "site": { "id": "cm7x…", "name": "Bosch Pro X4 drill", "address": "drill.tersby.app" }
}

How to connect

An address is added in the Webhooks section.

Add an address
Enter the URL and, if you like, a secret for the signature. With no site chosen, leads go from all sites.
Send a test
A test lead shows that your server answers. The result is in the delivery history.
Create an API key
The key is shown once. With it, an outside system can change leads.
Send a status back
PATCH /api/external/leads/{id} with the header Authorization: Bearer key and the body { "status": "bought", "saleAmount": 1190 }.

Good to know

RetriesIf your server didn't answer or returned a 5xx error, Tersby retries twice more: after 3 and after 10 seconds.
Delivery historyFor every address you see when a delivery happened, the response code and the error. On a failure, an alert arrives in Telegram.
A status by linkIf your system can only call a link when a status changes, create such a link on the CRM statuses tab.
ProtectionAddresses inside private networks are rejected, and redirects aren't followed.