Webhooks

Mentiontone sends a signed POST to your endpoint every time a new mention matches one of your alerts. Configure the endpoint and toggle delivery in Team settings → Notifications → Webhook.

Payload

Each delivery is a JSON object with a type and a data field.

{
  "type": "mention.created",
  "data": {
    "id": "...",
    "team_id": "...",
    "alert_id": "...",
    "sentiment": "positive",
    "url": "https://www.reddit.com/r/...",
    "body": "...",
    "author": "...",
    "platform": "reddit",
    "created_at": "2025-06-01T12:00:00Z"
  }
}

Request signing

Every request includes an X-Mentiontone-Signature header — an HMAC-SHA256 of the raw request body, keyed with your workspace signing secret. Verify it on arrival to reject spoofed requests.

# Ruby / Rails
expected = OpenSSL::HMAC.hexdigest("SHA256", signing_secret, request.raw_post)
ActiveSupport::SecurityUtils.secure_compare(
  "sha256=#{expected}",
  request.headers["X-Mentiontone-Signature"]
)

Find your signing secret at Team settings → Webhook → Request signing. Rotating it invalidates all prior signatures at once.

Retries and delivery log

Your endpoint must return 2xx within 10 seconds. Failed deliveries are visible in the delivery log at Team settings → Webhook → Delivery log.