Webhooks, API keys, and SMTP

Everything here is under Operations in the sidebar. For endpoints and examples, see the API reference.

Incoming webhooks: events into Banger

Events from your product start Journeys. Open Webhooks and add a source: your own app, Shopify, Calendly, Typeform, Intercom, Zendesk, Mixpanel, Supabase, or Vercel. Each gets a secret URL to paste into that service.

Supabase can also hand its auth emails (sign-up confirmation, password reset, magic link) to Banger, sent from your mailbox.

Outgoing webhooks: Banger tells your systems

Add an HTTPS endpoint and pick events: mail received, send status, Broadcast, audience, approval, domain, sending pauses, and Journey events.

• Each request is signed. Check the banger-webhook-signature header: an HMAC-SHA256 of the timestamp and body.
• Failed deliveries retry up to 12 times over several hours.
• Test sends a signed test event. Disable pauses an endpoint. Recent attempts shows what happened.

API keys

Open API keys › Create API key. Name it and give it only the permissions it needs: mail, contacts, Broadcasts, automations, imports, or workspace admin. The key is shown once. Revoke works immediately.

Send product email

• API: send receipts, password resets, and other product email. Add a Journey key to group sends into a Journey you can claim and manage.
• SMTP: the API keys page shows the host, ports, and username. The password is an API key with mail send permission.

Product email needs a Product or Mail lane on your domain.

Try it with your AI

Create an API key that can only send mail, and give my developer the SMTP settings to use it.