Destinations
Destinations are inboxes and endpoints you attach to an Intake. Create them in the console, then link them when you create or edit an Intake.
Types
Notification to a verified inbox. Available on every plan.
webhook
HTTPS POST with a JSON payload. Hobby and Pro.
discord
Incoming channel webhook. Pro.
auto_reply
Reply to the visitor from send.{your-domain}. Pro. One per Intake.
| type | availability |
|---|---|
| Notification to a verified inbox. Available on every plan. | |
| webhook | HTTPS POST with a JSON payload. Hobby and Pro. |
| discord | Incoming channel webhook. Pro. |
| auto_reply | Reply to the visitor from send.{your-domain}. Pro. One per Intake. |
Webhooks
PostMe POSTs JSON to your URL. Discord webhook URLs are rejected here — add those as a Discord destination instead. Failed deliveries are retried a few times.
Content-Type: application/json User-Agent: PostMe-Webhook/1 X-PostMe-Event: submission.created X-PostMe-Timestamp: 1710000000 X-PostMe-Signature: v1=<hex>
{
"event": "submission.created",
"submissionId": "…",
"captureKind": "intake",
"captureId": "…",
"intakeId": "your-id",
"receivedAt": 1710000000000,
"fields": { "name": "Ada", "message": "Hello" },
"meta": { "subject": "New inquiry", "replyTo": "ada@example.com" },
"referer": "https://yoursite.com/contact",
"origin": "https://yoursite.com"
}Console webhook destinations are signed. HMAC-SHA256 the string ${timestamp}.${rawBody} with the destination secret and compare to X-PostMe-Signature (v1=prefix). Reject if the timestamp is too old. The secret is on the destination page; you can rotate it there.
A one-off _webhook field is ignored unless the Intake has “Allow _webhook on the form” turned on. Prefer console destinations — anyone who can POST the form can otherwise add a URL. Form-field webhooks are unsigned.
Auto-reply
On Pro, connect a sending domain in the console. PostMe sends from send.yourdomain.com — never from the apex. Add the DNS records, then use Check DNS. Verification can take time; you can leave the page while it polls.
After the domain is verified, add an auto-reply destination and attach it to an Intake. The visitor address comes from _replyto or a field named email. Subject and body templates may use ${fieldName}.
Email shapes
Pro Intakes can customize the notification body with _pm_email* templates. See form fields.