# CRM Webhook Signing

## Outbound Webhooks

Outbound CRM webhooks use the endpoint secret configured in the Enterprise Hub.

## Header

`X-Crm-Signature`

## Algorithm

`sha256`

## Verification

Hash the raw request body using the endpoint secret and compare the result with the signature header.

## Inbound Testing

Use the Enterprise Hub inbound event form to simulate:

- payment confirmations
- email replies
- calendar updates
- contact sync events
- SSO callback events