How to Set Up a Custom Webhook

Create a POST endpoint on your server that will receive article data from BlogAmplify. The endpoint should:

• Accept POST requests with a Content-Type: application/json body
• Return a 2xx status code on success
• Be publicly accessible from the internet

BlogAmplify sends the following JSON payload to your endpoint when an article is published. The event field is "post.published" for real articles and "post.test" for test pings.

{
  "event": "post.published",
  "timestamp": "2026-03-13T10:30:00.000Z",
  "data": {
    "id": "post-uuid-here",
    "title": "Your Article Title",
    "slug": "your-article-title",
    "content_html": "<h2>Introduction</h2><p>...</p>",
    "content_markdown": "## Introduction\n\n...",
    "meta_description": "SEO meta description here",
    "featured_image": {
      "url": "https://s3.../featured-image.webp",
      "alt_text": "Description of the image"
    },
    "schema_markup": {
      "@context": "https://schema.org",
      "@type": "BlogPosting",
      "..."
    },
    "primary_keyword": "main keyword",
    "secondary_keywords": ["keyword1", "keyword2"],
    "word_count": 1500
  }
}

content_html contains the full article with semantic HTML. content_markdown has the same content in Markdown (may be null). Use whichever format your CMS prefers.

For security, BlogAmplify signs each request with HMAC-SHA256 using a shared secret. The signature is sent in the X-Webhook-Signature header as a hex-encoded digest.

Verify it on your server to ensure requests are genuinely from BlogAmplify:

const crypto = require('crypto');

function verifyWebhook(req, secret) {
  const signature = req.headers['x-webhook-signature'];
  if (!signature || !secret) return false;

  const expected = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(req.body))
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

class="cb-cmt">// Express / Fastify example
app.post('/api/blog', (req, res) => {
  if (!verifyWebhook(req, process.env.WEBHOOK_SECRET)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  const { event, data } = req.body;

  if (event === 'post.published') {
    class="cb-cmt">// Save the article to your CMS / database
    console.log('New article:', data.title);
    console.log('HTML content:', data.content_html);
    console.log('Keyword:', data.primary_keyword);
  }

  res.status(200).json({ success: true });
});

Sign in to your BlogAmplify account and navigate to the integration page. Click the Custom Webhook card.

Fill in the fields:

• Endpoint URL — The full URL of your POST endpoint (e.g. https://api.yoursite.com/blog)
• Webhook Secret (optional) — A shared secret string used for HMAC-SHA256 signing. Generate a random string (e.g. openssl rand -hex 32) and use the same value on your server for verification.

Click "Test Connection". BlogAmplify will send a test POST request to your endpoint with the same payload structure as a real publish, but with event: "post.test" and sample data. You'll see:

• Green checkmark if your endpoint returned a 2xx status
• Warning if the endpoint returned an error or was unreachable

Your endpoint should handle both post.published and post.test events gracefully.

Click "Complete Setup" to finish. Whenever BlogAmplify publishes an article, it will send the full article data to your endpoint as a JSON payload. You can process it however you like — insert into a CMS, send to a static site generator, store in a database, or forward to another service.