Receive events with outgoing webhooks

Register a URL under Webhooks and pick the events you want. Mule Mail POSTs a normalised JSON event for each: delivered, opened, clicked, bounced, complained, unsubscribed.

Every request is signed with HMAC-SHA256 using your organisation's webhook secret in the X-Mule Mail-Signature header. Verify it before trusting the payload. Events are delivered at least once, so make your handler idempotent on the event id.