Connect Zapier and Make

Webhook-target connections#

Zapier and Make use secure webhook targets rather than a published OAuth application. Create the receiving workflow in the provider, then add the generated target through Tabbio's connection setup.

Design the receiver defensively#

Validate the payload, keep provider secrets out of messages and logs, make repeated deliveries idempotent, and limit downstream permissions. A successful trigger only confirms that Tabbio handed the request to the configured target.

Rotate and revoke#

Replace a compromised target and revoke the old connection. Do not reuse one webhook across unrelated environments or companies.