We read
outbound onlyWebhooks deliver events from ScopeMantle to your endpoint. ScopeMantle does not read from your environment via this surface.
All integrations
WE
PLATFORM·Beta
Webhooks
HMAC-signed outbound webhooks for every governance event. Wire ScopeMantle into your SIEM, ticketing system, or workflow runner without a dedicated connector.
WHAT IT DOES
What ScopeMantle can do with Webhooks.
- Subscribe to every ScopeMantle governance event (grant detected, grant revoked, DSAR sent, SLA breached, breach signal, policy violation) on a single signed HTTPS endpoint
- Configure multiple destinations per tenant with per-subscription event-type filters
- Verify every payload with HMAC-SHA256 signatures and a replay-resistant timestamp header
- Inspect recent deliveries, retries, and dead-letters from the tenant settings UI
- Route into Splunk HEC, Datadog logs, Sentinel, n8n, Zapier, internal Slack bots, or any custom listener without writing a connector
LEAST PRIVILEGE
What we read, and what we don't.
We never
- Receive inbound traffic on this surface, webhooks are one-way ScopeMantle → you
- Include any user-content payloads such as email bodies or document contents, only governance metadata is delivered
- Buffer events indefinitely on retry, failed deliveries dead-letter after a documented retry envelope and remain inspectable in the UI
- Bypass your tenant's RBAC, only Owners and Admins can create, modify, or rotate webhook subscriptions
SETUP
Connect in a few steps.
- 01
Create a webhook subscription in tenant settings
Open Settings → Integrations → Webhooks → Add subscription. Paste your destination URL, copy the auto-generated HMAC shared secret, and choose which event types should fan out.
- 02
Verify signatures on your receiver
Each delivery includes an `X-ScopeMantle-Signature` header with `t=<timestamp>,v1=<hex-hmac>`. Compute HMAC-SHA256 over `<timestamp>.<raw-body>` with your shared secret and reject mismatches or stale timestamps.
- 03
Test end-to-end from the UI
Click Send test event in the subscription row. The receiver should respond 2xx within 10 seconds. Failed deliveries appear in the Recent deliveries panel with full request, response, and retry context.
- 04
Monitor and rotate
Inspect delivery health from the same panel. Rotate the HMAC secret in-place when needed, ScopeMantle keeps both the old and new secret valid for a 24-hour overlap window.
Find the Context.ai in your org before the attacker does.
15-minute connection. First inventory in an hour. Vendor risk scores for every third party by tomorrow.
Book a demo to see the inventory on your own tenant.