Sending Leads from Zapier, n8n, Make, or Your CRM
Generate a signed source URL once, then post JSON to it from any tool that can send HTTP requests.
When to use this
Use a Custom Webhook source when the lead starts in a tool that can send HTTP requests but does not have a native LeadToSheet source yet. It is the best current path for Google Lead Form Extensions, TikTok Lead Gen, custom CRMs, Zapier, n8n, Make, and internal systems.
Tip
If LeadToSheet has a native source for your provider, use the native source first. Native Meta, LinkedIn, and Formaloo paths handle provider-specific setup for you.
Generate the URL
- 1
Open Sources
In LeadToSheet, open the site that should receive the leads, then choose Sources.
- 2
Pick Custom Webhook
Click the Custom Webhook card and generate a signed URL for the site.
- 3
Name it
Use a name you will recognise later, such as Google Lead Forms via Zapier or Website CRM export.
- 4
Copy the URL and signing secret
The signing secret is shown once. Store it in your automation tool or secret manager before closing the dialog.
Send a signed POST
Each request must include an HMAC-SHA256 signature of the raw request body in the x-leadtosheet-signature header, with the sha256= prefix, computed using your signing secret.
Payload shape
LeadToSheet accepts three common JSON shapes. Pick the one that matches your sender.
- Wrapped: { "fields": { "Email": "alice@example.com", "Full name": "Alice" }, "submittedAt": "2026-05-09T10:00:00Z" }
- Wrapped automation style: { "data": { "Email": "alice@example.com" } }
- Flat: { "Email": "alice@example.com", "Full name": "Alice" }
Tip
Pass id or dedupeKey when the sender retries requests. LeadToSheet uses it to avoid recording the same external lead twice.
Zapier walkthrough
- 1
Create a Zap
Choose your source app as the trigger, such as Google Lead Form Extensions, TikTok Lead Gen, or your CRM. Use Webhooks by Zapier -> Custom Request as the action.
- 2
Method and URL
Set Method to POST, paste the LeadToSheet webhook URL, and send Content-Type: application/json.
- 3
Compute the HMAC
Add a Code by Zapier step that computes a SHA-256 HMAC of the exact JSON body using your signing secret, then prefixes the digest with sha256=.
- 4
Map the fields
Build the JSON body with the field names you want to see in LeadToSheet. Those names carry through to the form, lead table, sheet, and routes.
Verify your setup
Before wiring the full automation, run a connectivity check: GET the webhook URL with ?ping=hello and an x-leadtosheet-signature header containing sha256= followed by an HMAC-SHA256 of the ping value using your signing secret. LeadToSheet echoes hello if the signature matches.
Important
Never put your signing secret in the URL. LeadToSheet only accepts the secret through the x-leadtosheet-signature header so it does not leak into proxy or browser logs.
