Skip to content

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Probo Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture
Overview Understand Probo and its core concepts Product Explore Probo's GRC capabilities Developers Explore GraphQL, CLI, MCP, n8n, and webhooks Deployment Probo Cloud, self-hosting, and configuration

Explore

GitHub Explore our open-source compliance tools

Probo Trigger for n8n

Configure the Probo Trigger node to start n8n workflows on Probo webhook events, covering signature verification, output fields, and troubleshooting.

View as Markdown

The Probo Trigger node starts an n8n workflow when a subscribed Probo event occurs. It replaces polling with a webhook subscription managed as part of the workflow lifecycle.

  • Probo API credentials with access to the selected organization and permission to manage webhook subscriptions.
  • A production webhook URL that Probo can reach over HTTPS.
  • The correct public webhook configuration in n8n, especially when n8n runs behind a reverse proxy.

When you activate a workflow that includes Probo Trigger:

  1. The node creates a webhook subscription in Probo for the selected organization and events.
  2. Probo delivers signed POST requests to the node’s webhook URL.
  3. The node verifies the HMAC-SHA256 signature and timestamp freshness by default.
  4. The workflow runs with the webhook payload as its input item.
  5. When you deactivate the workflow, the node deletes the subscription.

If the organization, selected events, or webhook URL changes, the node removes the stale subscription and creates a matching subscription during activation. It avoids creating a second subscription when cleanup of the old one fails.

FieldDescription
Organization IDOrganization that emits the events
EventsOne or more event types to subscribe to
Verify SignatureReject deliveries with a missing or invalid HMAC signature; enabled by default
Timestamp Tolerance (Seconds)Reject deliveries outside this past-or-future window; defaults to 300. Set to 0 only to disable freshness checking.

Credentials use the same Probo API credentials as the action node.

Probo Trigger supports the same event set as webhook subscriptions, including:

  • Third party created / updated / deleted
  • User created / updated / deleted
  • Obligation created / updated / deleted
  • Rights request created / updated / deleted
  • Document created / updated / archived / unarchived / deleted
  • Document version created / updated / published / rejected / deleted
  • Document version signature requested / signed / cancelled
  • Document version approval quorum requested / updated / approved / rejected / voided

See the full wire-format payloads in Webhook Event Types.

Each trigger execution outputs the full webhook JSON body — the root envelope plus nested resource fields:

Root fieldDescription
eventIdUnique delivery identifier. Stable across retries; use it as an idempotency key
subscriptionIdWebhook subscription ID
organizationIdOrganization ID
eventTypeEvent type (e.g. document:updated)
createdAtEvent timestamp
dataCurrent entity payload (resource fields live here, not at the root)
updatedFromPresent on *:updated events — entity snapshot before the change

Probo also sends HTTP headers such as Idempotency-Key, X-Probo-Webhook-Delivery-Id, X-Probo-Webhook-Event, X-Probo-Webhook-Organization-Id, X-Probo-Webhook-Timestamp, X-Probo-Webhook-Signature, and X-Probo-Webhook-Host. The Trigger node uses the signature headers for verification; workflow expressions typically read the body root fields above. See Delivery and recovery for the full header and root-field reference.

Example expressions:

{{ $json.eventType }}
{{ $json.organizationId }}
{{ $json.updatedFrom.membership.role }}
{{ $json.data.membership.role }}
  1. Add Probo Trigger to a new workflow.
  2. Select credentials and set the Organization ID.
  3. Choose events, for example Document Version Signature Signed.
  4. Add downstream nodes that use $json.data (and $json.updatedFrom for updates).
  5. Activate the workflow. The node registers the production webhook subscription automatically.
  • Filter on eventType before accessing event-specific fields under data.
  • Check that optional fields exist. updatedFrom is present only for update events.
  • Use eventId as an idempotency key before creating an external side effect. Probo retries transient HTTP failures with the same eventId.
  • Keep the workflow response fast. Probo times out the HTTP delivery after 15 seconds. The trigger acknowledges the webhook before downstream execution.
  • Configure an n8n error workflow for failures after the trigger has already returned 2xx. Probo only retries when the HTTP delivery itself fails.
SymptomCheck
Activation cannot create the subscriptionv1:webhook scope, user permissions, organization ID, and n8n’s configured production webhook URL
Probo cannot deliverPublic DNS, HTTPS certificate, reverse proxy, firewall, and the subscription’s endpoint URL
Delivery returns 403Signature verification state, server clocks, and whether the subscription was recreated after a change
Workflow receives no selected eventThe workflow is active and the event belongs to the selected organization and event set
Duplicate downstream actionDeduplicate with eventId and review manual or error-workflow retries

If n8n moved to a new public URL, deactivate and reactivate the workflow so the node can replace the old subscription.