Zoho CRM webhooks: how they work, the limits and what happens when they fail

What they are and who can set them up

Zoho describes webhooks as instant HTTP notifications sent to third-party applications when events occur in Zoho CRM, triggered through workflow rules. Zoho says users need the Manage Workflow permission, and that the page is aimed at CRM users and programmers with REST API skills. Zoho says webhooks are outbound only: data cannot be pulled from other apps into CRM with them.

Source: Zoho Help: Webhooks in workflow rules

Configuration, per Zoho

• Go to Setup, Automation, Actions, Webhooks, then Configure Webhook.
• Method options are POST (default), GET, PUT or DELETE. The URL to Notify is the third-party REST endpoint and can include merge fields.
• Authorization is either General (an API key or auth token) or Connection (for example OAuth).
• Supported modules include primary modules such as Leads, Accounts, Contacts and Deals, plus Meetings and Tasks; Call Logs and Notes are not supported.
• To use it, associate the webhook with a workflow rule as an instant or time-based action, save, then test with data that meets the rule's criteria.

Source: Zoho Help: Webhooks in workflow rules

Limits Zoho states

• Up to 6 webhooks per workflow rule: 1 instant action and 5 time-based actions.
• Data for a maximum of 10 CRM fields per webhook, and up to 10 header parameters.
• Up to 15,000 characters in the raw data editor, and 10,000 characters for user-defined format when using POST.
• Only ports 80 and 443 are supported in the URL.
• Daily calls: Professional, 50,000 calls a day or 100 per user per day, whichever is lower; Enterprise, 500,000 or 500 per user; Ultimate, 1,000,000 or 1,000 per user.

Source: Zoho Help: Webhooks in workflow rules

Failures and retries, per Zoho

• After a failure, Zoho sends a second notification 15 minutes later; after that, no further webhook notifications are sent for that workflow trigger.
• If the daily limit is exceeded, the remaining notifications for the day are not sent, and the administrator is notified.
• Zoho says it does not send email notifications if an integration breaks because of a third-party API problem.
• Listed error categories include missing parameters, unauthorized requests, invalid URL and a socket timeout when there is no response within 10 seconds.
• A usage graph under the Webhooks setup page shows daily or weekly usage for the past 7 days.
• Zoho advises updating API tokens regularly to match third-party limits.

Source: Zoho Help: Webhooks in workflow rules

Before you rely on a webhook (practical advice)

This section is advice from experience, not vendor documentation.

• Because retries stop after the second attempt, have the receiving system or a regular check confirm that expected records arrived.
• Because Zoho does not email on third-party failures, check the usage graph on a routine rather than waiting for a complaint.
• Keep payloads small and send only the fields the other system needs, given the 10-field limit.
• Name webhooks after the system and event they serve, so they can be found later.
• If you need two-way sync, consider whether a different integration route fits better than a one-way webhook.

Integrations that quietly stop?

Skyfall Labs designs and monitors Zoho CRM integrations and automation. Because we are a Zoho Partner, treat our view with the interest we have disclosed.