Guides · Guide · September 15, 2026

Paste a Zapier Catch Hook — VisibleHours is not a Zapier app

Paste an HTTPS Catch Hook URL, copy the signing secret, and send a test ping. Not a published Zapier app and not a marketplace listing.

Zapier talks to VisibleHours through a Catch Hook URL you paste. There is no VisibleHours listing in a Zapier marketplace, no published Zapier app, and no “1,000 integrations” catalog. Slack, Jira, and Asana still use OAuth when client IDs are set. Everything else — Zapier included — is signed JSON to an HTTPS URL you already own.

Read /features/integrations, then the signed-in integrations tutorial. Ask VisibleHours “connect zapier”, “open catch hook”, or “zapier webhook” opens /integrations#catch-hook. “send test ping” opens /integrations#hooks. “open delivery log” opens /integrations#delivery-log. “how to set up zapier”, “zapier tutorial”, or “how to create a catch hook” opens Help. Ask or Search “zapier guide” or “catch hook guide” stays on this article. Public site search will not create a hook, email your team, or run outreach.

Paste a Catch Hook, copy the secret, ping

  1. Sign in and open Integrations.
  2. Create a catch inbox to inspect payloads here, or paste an HTTPS Catch Hook URL from Zapier (or any HTTPS automation).
  3. Choose events: activity recorded, or a timesheet submitted, approved, or rejected.
  4. Save. Copy the signing secret once. It is not shown again.
  5. Press Send test ping. The body includes type: "ping". Headers are X-VisibleHours-Signature and X-VisibleHours-Timestamp. Inbox rows stay on the delivery log. HTTPS rows show the status from your endpoint.
  6. Verify: HMAC-SHA256 of timestamp + "." + rawBody, hex digest, prefixed v1=.

Sample recipes — timesheet approved to a spreadsheet row, timesheet submitted to a manager inbox you already own — live in signed-in Help and the integrations tutorial. VisibleHours does not create the Zap, send the message, or email employees.

What this is not

  • Not a published Zapier app, a marketplace listing, or a thousand-integrations grid.
  • Not OAuth into Zapier. You paste a URL. Tokens for Slack, Jira, and Asana stay on those cards.
  • Not a live write-back into Slack, Jira, or Asana in this slice.
  • Not outreach. Ask “please email my team about this” is refused.
  • Not a dump of another organization’s people or hours.
  • Not a replacement for the OAuth guide — see Slack, Jira, Asana OAuth and signed outbound webhooks.