API keys and webhooks

Covent exposes API keys and webhooks for workspaces that want to build custom integrations, sync data to external systems, or automate workflows beyond what the built-in integrations cover.

API keys

Use an API key to call Covent's REST API server-to-server.

• Create keys in Settings > Integrations > API.
• Copy the key when it's generated - it's shown only once.
• Revoke any key that might be compromised; revocation takes effect immediately.
• Prefer one key per integration so you can revoke without breaking others.

Webhooks

Webhooks push events from Covent to a URL you control. Covent sends an HTTPS POST with the event payload when the event occurs.

Supported event types:

• deal.status_changed
• lead.created
• lead.updated
• offer.received
• message.received
• message.sent

Create webhooks in Settings > Integrations > Webhooks:

1. Paste the destination URL
2. Pick which events to subscribe to
3. Save

Inbound webhooks

You can also configure inbound webhooks that accept events from your own systems and translate them into Covent actions. Supported actions include creating a lead, updating a lead, creating a listing, and triggering a campaign. The inbound endpoint base is https://api.getcovent.com/webhooks/in.

Security

• Always use HTTPS endpoints
• Validate incoming requests (Covent signs webhook payloads; the signing secret is shown in the webhook detail view)
• Rotate API keys periodically