Skip to content

Slack and webhooks

Corner can tell Slack, Zapier, Make, n8n or your own system the moment a visitor leaves their details or asks for a person. Set it up in Settings > Integrations. It comes with the Builder and Studio plans, and owners and admins can manage it.

Slack

In Slack, add the Incoming Webhooks app to the channel you want, copy its address (it starts with https://hooks.slack.com/services/), and paste it into the Slack card in Corner. Choose the events, then select Send test. Each new lead and chat request arrives as a short message with a link back to Corner.

Zapier, Make and n8n

Start a Zap with Webhooks by Zapier and the Catch Hook trigger (in Make, a Custom webhook; in n8n, a Webhook node). Paste its address into the Webhooks card in Corner and select Send test so the tool sees a sample. From there, send leads to your CRM, a spreadsheet, email or anything else the tool connects to.

Events

Every delivery is a POST with a JSON body and these headers: Corner-Event (the event name), Corner-Delivery (its id, the same on every attempt, so you can ignore repeats) and Corner-Signature.

lead.created: a visitor left their contact details.

{
  "id": "evt_4Jx0...",
  "type": "lead.created",
  "createdAt": "2026-10-03T09:41:00.000Z",
  "workspaceId": "OrRq...",
  "data": {
    "assistant": "Harbor Bakery",
    "lead": {
      "id": "led_8Qm2...",
      "name": "Priya Shah",
      "email": "[email protected]",
      "phone": null,
      "message": "Wedding cake tasting?",
      "pageUrl": "https://harbor-bakery.example/cakes"
    },
    "url": "https://app.getcorner.ai/leads?lead=led_8Qm2..."
  }
}

chat.requested: a visitor asked to talk to a person.

{
  "id": "evt_9Pv1...",
  "type": "chat.requested",
  "createdAt": "2026-10-03T09:45:12.000Z",
  "workspaceId": "OrRq...",
  "data": {
    "assistant": "Harbor Bakery",
    "conversation": { "id": "cnv_2Kd7...", "visitor": "Sam Lee", "lastMessage": "Can I talk to someone?" },
    "url": "https://app.getcorner.ai/inbox?c=cnv_2Kd7..."
  }
}

Send test delivers a test event with a short message, so you can check the connection without waiting for a real visitor.

Verify the signature

Each webhook has its own signing secret, shown in Settings > Integrations. Corner-Signature looks like t=1759484460,v1=5f2c...: t is the time it was sent (Unix seconds) and v1 is the HMAC-SHA256, in hex, of the text t, a full stop and the raw body, made with your secret. Recompute it and compare, and reject old timestamps:

import { createHmac, timingSafeEqual } from "node:crypto"

// rawBody: the request body exactly as received, before any JSON parsing.
export function isFromCorner(rawBody, signatureHeader, secret) {
  const parts = Object.fromEntries(signatureHeader.split(",").map((p) => p.split("=")))
  const timestamp = Number(parts.t)
  if (!timestamp || Math.abs(Date.now() / 1000 - timestamp) > 300) return false // older than 5 minutes
  const expected = createHmac("sha256", secret).update(`${timestamp}.${rawBody}`).digest("hex")
  const given = Buffer.from(parts.v1 ?? "", "utf8")
  return given.length === expected.length && timingSafeEqual(given, Buffer.from(expected, "utf8"))
}

Delivery

  • Answer with any 2xx status within 10 seconds. Corner doesn't follow redirects.
  • A network error, a timeout, a 429 or a 5xx is tried twice more, about 2 and 8 seconds later. Other 4xx answers aren't retried.
  • Addresses must use https and be on the public internet: Corner never sends to private networks.
  • The settings page shows whether the last delivery worked, and why it didn't if it failed.
  • A workspace can have up to 5 integrations. Deliveries stop if the workspace moves to the Free plan.