Crisp

Authentication

Property	Value
Method	URL key parameter
Header required	X-Original-Url
Query parameter	?key=SECRET

Crisp does not use HMAC signatures. Instead, authentication is done via a secret key passed as a URL query parameter. Transyt verifies the key using constant-time comparison.

Note

The X-Original-Url header must be present in the request for Transyt to extract the key parameter. This is the original URL before any proxy rewrites.

Setup

1. In Crisp, go to your website’s Settings > Webhooks
2. Set the webhook URL to:

   https://ingest.transyt.com/crisp/{your-account-slug}?key=YOUR_SECRET_KEY

3. Use the same secret key when creating the Transyt account

Account Configuration

curl -X POST https://ingest.transyt.com/admin/accounts \
  -H "X-Admin-Token: YOUR_ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "provider": "crisp",
    "account_slug": "main",
    "app_key": "my-app",
    "signing_secret_current": "your-secret-key"
  }'

Event Type Mappings

Crisp Event	Transyt Event
message:send	chat.message
message:received	chat.message_received
session:set_email	chat.email_set

External ID

The external ID is a composite of session_id:fingerprint or session_id:event:timestamp.