Webhooks
Meta webhook verification, event callbacks, and data-deletion endpoints used by the Postifys app - plus honest scope notes for customer notifications.
Quick answer: Postifys currently documents Meta inbound webhooks used by Meta to verify and notify the Postifys app (
/webhooks/meta). These are platform callbacks to Postifys - not a general customer “subscribe my URL to every publish event” API in the public reference.What this page covers
- Meta webhook verification (
GET /webhooks/meta) - Meta webhook event receiver (
POST /webhooks/meta) - Meta data-deletion callback (
POST /webhooks/meta/data-deletion)
Honest scope: If you need your own backend notified when a Postifys publish finishes, poll Post History / status APIs or use n8n branching on the publish node response. A documented customer outbound webhook product is not listed in the current API reference.
Verify Meta webhook
GET /webhooks/meta returns Meta’s challenge when hub.mode=subscribe and hub.verify_token matches the server META_WEBHOOK_VERIFY_TOKEN.
curl "https://postifys.com/webhooks/meta?hub.mode=subscribe&hub.verify_token=TOKEN&hub.challenge=abc123"
Receive Meta webhook events
POST /webhooks/meta accepts Meta event payloads, logs them server-side, and returns HTTP 200.
curl -X POST https://postifys.com/webhooks/meta \
-H "Content-Type: application/json" \
-d '{"object":"page","entry":[]}'Meta data deletion callback
POST /webhooks/meta/data-deletion verifies Meta’s signed request, deletes stored Facebook/Instagram connection data for the user, and returns a status URL plus confirmation code.
curl -X POST https://postifys.com/webhooks/meta/data-deletion \ -H "Content-Type: application/x-www-form-urlencoded" \ --data "signed_request=SIGNED_REQUEST_FROM_META"
{
"url": "https://postifys.com/data-deletion/del_...",
"confirmation_code": "del_..."
}Security notes
- Webhook paths are listed under
Disallow: /webhooks/in robots.txt - do not submit them for indexing. - Verification tokens and signed requests are server secrets; never expose them in public docs examples beyond placeholders.
- Data-deletion callbacks are part of Meta compliance flows; see also Security and Privacy.