Send Try-On Leads to Any CRM with a Signed Webhook
TryOnCloud's outbound webhook delivers every captured try-on lead to a URL you control, in real time. Connect Zoho, Mailchimp, HubSpot, Salesforce, Brevo, ActiveCampaign, Zapier, Make, or your own backend. Each delivery is HMAC-SHA256 signed, retried until it lands, and limited to the shopper's email and the product they tried.
New to this? Read the full webhook integration guide
Method
Outbound HTTPS webhook (HMAC-SHA256 signed)
Auth
HMAC-SHA256 signature with a per-store secret
Language
No code (Zapier/Make) or any language
Best for
Any Shopify fashion store with a CRM or automation tool
Why use TryOnCloud with Webhook
- Connect from the Leads tab in two clicks, then paste your endpoint URL
- Works with any CRM or tool: Zoho, Mailchimp, HubSpot, Salesforce, Brevo, ActiveCampaign, Zapier, Make, n8n, or your own server
- Real-time: the lead reaches your CRM within seconds of the try-on
- Secure by default: HMAC-SHA256 signing, encrypted secret, HTTPS-only, replay protection, SSRF hardening
- Guaranteed at-least-once delivery with retries over hours, so a brief outage never loses a lead
How to set up TryOnCloud on Webhook
Estimated setup time: 3 minutes. Difficulty: Beginner.
- 1
Install TryOnCloud on Shopify
Add the TryOnCloud app from the Shopify App Store. The webhook is configured inside the app, in the Leads tab.
- 2
Open the Leads tab, then Integrations
Find the Webhook row in the Integrations table and click Connect.
- 3
Paste your endpoint URL and copy the secret
Enter your HTTPS endpoint (your CRM's inbound webhook URL, a Zapier or Make catch hook, or your own server). Copy the signing secret shown once and store it securely.
- 4
Verify on your side
Add the HMAC signature and timestamp checks to your endpoint, or map the fields in Zapier or Make with no code.
- 5
Go live
Every captured try-on lead is now delivered to your endpoint in real time, with guaranteed retries if anything is temporarily down.
Code example
Verify a webhook signature on your endpoint (Node)
import crypto from "crypto"
// rawBody = the exact bytes of the request body (do not re-serialize)
const expected = crypto
.createHmac("sha256", YOUR_STORE_SECRET)
.update(rawBody)
.digest("hex")
const sent = req.headers["x-tryoncloud-signature"].replace("sha256=", "")
const ok = crypto.timingSafeEqual(
Buffer.from(expected),
Buffer.from(sent)
)
if (!ok) return res.status(401).end() // forged or tampered
// also reject if x-tryoncloud-timestamp is too old,
// then dedupe on x-tryoncloud-delivery-id (at-least-once delivery)Things to know
- ⓘRequires the TryOnCloud app installed on your Shopify store
- ⓘYour endpoint must be HTTPS; TryOnCloud refuses non-HTTPS URLs
- ⓘTo verify signatures you need a small endpoint, or route through Zapier or Make with no code
Frequently asked questions
Which CRMs can I connect the webhook to?
Any CRM, email platform, or automation tool that accepts an inbound HTTP POST: Zoho CRM, Mailchimp, HubSpot, Salesforce, Brevo, ActiveCampaign, Omnisend, Sendlane, GoHighLevel, Pipedrive, and Constant Contact, plus Zapier, Make, and n8n which route to thousands more apps.
How do I verify a webhook is really from TryOnCloud?
Every request is signed with HMAC-SHA256 over the raw body using your store secret, sent in the x-tryoncloud-signature header. Recompute the HMAC and compare with a timing-safe comparison. This is the same scheme Shopify and Stripe use.
What happens if my endpoint is down?
Nothing is lost. Every event is written to a durable outbox first, then delivered by a background worker that retries with exponential backoff over hours. Delivery is at-least-once; dedupe on x-tryoncloud-delivery-id.
What data is in the payload?
Minimal: the shopper's email (which they consented to share) and the product they tried (title and URL). No payment data and no uploaded photo. You are the data controller; TryOnCloud is the processor.
Do I need a developer?
To connect, no. To verify and process the events, a developer adds a small endpoint, or you route the webhook through Zapier or Make and map the fields with no code.
Ready to add virtual try-on to your Webhook store?
Join hundreds of fashion merchants reducing returns and boosting conversions with TryOnCloud. Start free, no credit card required.
Get started free