Outbound HTTP notifications for stream and AutoDJ events, with templated bodies so you can match whatever shape the receiver wants. Manage from Admin → Webhooks or the JSON API at /api/webhooks (super-admin only).

SSRF guard: webhook URLs are validated against the same rules as relays — loopback, private (RFC 1918), and link-local addresses are rejected. See Security.

A webhook subscribes to one or more events via its events list.

"webhooks": [
 {
 "name": "Discord — #now-playing",
 "url": "https://discord.com/api/webhooks/<id>/<token>",
 "method": "POST",
 "content_type": "application/json",
 "headers": { "X-Source": "tinyice" },
 "events": ["now_playing"],
 "body_template": "{\"content\": \"Now playing: {{.Artist}} - {{.Title}}\"}",
 "enabled": true
 }
]

Leave body_template empty to send the legacy JSON envelope ({event, timestamp, hostname, data}) — existing receivers keep working unchanged. Fill it in to render any shape with Go's text/template.

For GET / HEAD webhooks the rendered body is appended to the URL as a query string instead of sent as a request body — that's how the TuneIn AIR Playing.ashx preset works from a single template.

When the payload carries a mount, the dispatcher derives {{.MountURL}} (public listen URL) and {{.PlayerURL}} (embedded player) from base_url. Use {{if .MountURL}}...{{end}} to no-op gracefully when base_url isn't set.

Every key from the event payload is promoted to the top level, in both snake_case and a CamelCase alias — {{.duration_seconds}} and {{.DurationSeconds}} both work; likewise {{.Artist}}, {{.Title}}, {{.Mount}}.

Helper functions: urlencode, json, lower, upper. Example: {{.Artist | urlencode}}.

The editor's Load preset dropdown fills method, headers, and body for: Discord, Slack, Mattermost, Microsoft Teams (MessageCard), Telegram bot sendMessage, ntfy.sh, Pushover, TuneIn AIR Playing.ashx, a generic JSON envelope, and webhook.site (echo, for debugging templates). Loading a preset leaves your URL field alone if you've already typed one.

Each row has a Test button that fires a sample payload so you can validate the template before going live.

{
 "name": "Discord — #now-playing",
 "url": "https://discord.com/api/webhooks/<channel-id>/<token>",
 "method": "POST",
 "events": ["now_playing"],
 "body_template": "{\"username\":\"TinyIce\",\"content\":\":musical_note: **{{.Mount}}** — {{.Artist}} – {{.Title}}{{if .MountURL}} — [Listen]({{.MountURL}}){{end}}\"}",
 "enabled": true
}

For track-start specifically, the AutoDJ on_play_command hook runs a shell command with the track metadata in environment variables — no HTTP endpoint required. Webhook panics in user-supplied subscribers are contained by recover() so a bad receiver can't crash the server.

Next: HTTP API · Observability · Authentication and Users