Skip to content
webhook WEBHOOKS & DATA INTEGRATION

Your Data. Your Systems. In Real Time.

HotPilot's webhook engine lets tech-savvy teams push live event data to any external system — CRMs, analytics platforms, BI tools, custom dashboards — the moment something happens in your property.

Real-time event delivery 30+ event types Signed HMAC payloads

The Problem

Your PMS Data
Is Trapped Inside Your PMS.

Modern hotel operations rely on more than one system — a revenue management tool here, a CRM there, a BI dashboard for ownership, a custom analytics stack for marketing. But most PMS platforms don't make it easy to get data out in real time. You're left choosing between manual exports, expensive integrations, or accepting that your external tools will always be out of date. For tech-forward properties and hotel groups, that's not good enough.

lightbulb

The Solution

A Real-Time Event. Stream for Every. Thing That Happens.

HotPilot Webhooks delivers a signed, structured JSON payload to any HTTPS endpoint you configure — the instant an event occurs in your property. New booking? Webhook fires. Guest checks in? Webhook fires. Payment received, review submitted, ticket opened? All webhooks. Build exactly the integrations your stack needs, without waiting for an official connector.

check_circle 30+ event types across bookings, guests, payments and ops
check_circle HMAC-SHA256 signed payloads for verified delivery
check_circle Automatic retries with exponential back-off
check_circle Full delivery logs and replay via console

EVENT CATALOGUE

30+ Events Across Every Part of Your Operation

event_note

Booking Events

booking.confirmed, booking.modified, booking.cancelled, booking.no_show, booking.quote_created — every stage of the reservation lifecycle.

login

Arrival & Departure

guest.checked_in, guest.checked_out, guest.early_checkin_requested, guest.late_checkout_approved — triggered the moment the event occurs.

payments

Payment Events

payment.received, payment.refunded, payment.failed, invoice.issued, voucher.redeemed — for finance, accounting, and fraud monitoring.

person_search

Guest Profile Events

guest.created, guest.updated, guest.vip_flagged, guest.review_submitted, guest.consent_updated — keep your CRM in sync automatically.

build

Operational Events

ticket.opened, ticket.assigned, ticket.resolved, housekeeping.room_clean, maintenance.task_created — for dashboards and workflow automation.

assessment

Reporting & Compliance

esti.submitted, city_tax.calculated, revenue.daily_snapshot — trigger nightly aggregations or compliance pipelines automatically.

Features

Built for Teams That Know What They're Doing

01 Security

Signed, Verified, and Safe to Trust.

Every webhook payload HotPilot sends is signed with HMAC-SHA256 using a secret you control. Verify the signature on your server before processing — so you know every event is genuinely from HotPilot and hasn't been tampered with in transit.

HMAC-SHA256 signature on every request header
Per-endpoint secret rotation without downtime
TLS 1.2+ enforced on all outbound requests
IP allowlisting available on request
Payload schema versioning — no surprise breaking changes
HotPilot Security
02 Reliability

Delivery You Can Build Production Systems On.

HotPilot retries failed deliveries automatically using exponential back-off — so a brief downtime on your end won't result in lost events. Every delivery attempt is logged, and you can replay any event from the last 72 hours directly from the webhook console.

Automatic retries: 5 attempts over 24 hours
Exponential back-off to avoid overwhelming your server
72-hour event replay from the console
Delivery status: pending, delivered, failed, retrying
Email alerts when an endpoint fails repeated deliveries
HotPilot Reliability
03 Developer Experience

A Console That Actually Helps You Debug.

The HotPilot webhook console gives you a live view of every event fired, every delivery attempt, and every response code — with the full request and response body for inspection. Test your endpoints before going live, and use event filtering to debug specific flows without noise.

Live event log with full request and response body
One-click test delivery for any event type
Filter log by event type, endpoint, or status
Copy payload as cURL command for local testing
Full OpenAPI schema for all event payloads
HotPilot Developer Experience

Impact

The Numbers Behind the Integration

30+

event types covering every meaningful action across the entire property

<120ms

average webhook delivery latency from event to HTTPS endpoint

99.9%

delivery success rate across all endpoints with retry logic enabled

72h

event replay window — never lose an event due to a transient failure

FAQ

Frequently Asked Questions

Everything you need to know about this feature.

Every request includes an X-HotPilot-Signature header containing an HMAC-SHA256 hash of the raw request body, signed with your endpoint secret. Compute the expected signature on your server and compare — if they match, the payload is genuine and untampered. Code examples for Node.js, Python, and PHP are available in our developer docs.

HotPilot retries the delivery automatically. We attempt delivery 5 times using exponential back-off — first retry after 1 minute, then 5, 15, 60, and 240 minutes. If all 5 attempts fail, the event is marked as failed and you'll receive an email alert. You can then replay the event manually from the webhook console within 72 hours.

Yes. When configuring an endpoint, you choose which event types to subscribe to. You can also configure multiple endpoints with different event subscriptions — for example, one endpoint for booking events going to your CRM, and another for payment events going to your accounting system.

There is no cap on the number of webhook events HotPilot fires — every event in your property triggers the relevant webhooks regardless of volume. Your endpoint should be able to handle bursts, particularly during high check-in/check-out periods. We recommend responding with a 200 status within 10 seconds and processing asynchronously if needed.

HotPilot uses payload schema versioning. We will never remove fields or change data types in a versioned payload without a deprecation period. New fields may be added additively. When breaking changes are required, a new schema version is introduced and you can migrate at your own pace before the old version is deprecated.

Connect HotPilot to
Your Entire Stack.

Start streaming real-time property events to any system your team uses — in minutes, with no middleware required.