---
search:
  tags:
    - external-events
    - POST
seo:
  description: >-
    Inbound provider webhook. The raw JSON body is… Reference for the POST
    /workspaces/{organizationId}/external-events/{source} endpoint in the Pile
    API.
sidebar:
  label: Create external event
  badge: POST
title: Create external event
type: openapi-operation
---
Inbound provider webhook. The raw JSON body is verified with HMAC-SHA256 against the source's mapping secret — send the hex digest in any *-signature header (X-Pile-Signature, Finix-Signature, sha256=<hex>, or t=...,v1=<hex> envelopes all work). The provider event id for dedupe comes from a *-Event-Id header or the payload's id field.

`POST /workspaces/{organizationId}/external-events/{source}`

**Request body** (`application/json`)

Request body example:

```json
{
  "property1": null,
  "property2": null
}
```

**Responses**

- `200` — Event received and recorded
- `401` — Invalid webhook signature
- `404` — External event source not configured

Response example, 200:

```json
{
  "ok": true,
  "status": "string",
  "deliveryId": "string",
  "outcome": "string",
  "completedIssueIds": [
    "string"
  ]
}
```