Troubleshooting: External Integrations

401 Unauthorized

• Token is missing or incorrect.
• Check the token in Settings → Third-Party Tokens.
• Ensure the Authorization header uses format: Bearer {token}.

400 Bad Request: signature invalid

1. Verify the canonical input: {timestamp}\n{nonce}\n{raw_body}.
2. Use the raw Bearer token (not base64-encoded) as the HMAC key.
3. Use HMAC-SHA256 and output lowercase hex.
4. Do not modify the request body after signing.

400 Bad Request: timestamp expired

• Your server clock is out of sync.
• Sync server time with an NTP server.
• Sign the request immediately before sending (not in advance).

Workflows not triggering from events

1. Confirm the matching workflow is in Active status.
2. Verify the workflow trigger type is External Integration Event Received.
3. Check that the Automation feature is enabled in your subscription plan.
4. View the webhook monitoring widget on the dashboard for dispatch status.