Skip to content
Help Center

Categories

Search the Help CenterCtrl K
On this page

Build an app or connect webhooks

Create an OAuth application that other Drime users connect to their accounts, receive webhooks, and get notified of Drime Sign events on your server.

Updated Web

To use the Drime API on your own account, a personal token is enough: see Create an API token. To build an app that other Drime users connect to their accounts, create an OAuth application: your users approve it on Drime, and it never sees their password.

#Create an OAuth application

Any signed-in user can create applications from the developer portal, My applications, then Create application.

The Create application form of the developer portal with the three application types

You first choose what you are building:

Choice

For

A website or a server

You get a secret key to keep on your server.

A desktop or mobile app

Installed on your users' devices, so no secret key.

A script, just for me

A small tool you run yourself.

Then you choose what the application needs: A folder of its own (it only ever sees one folder, created in the Drive) or The whole Drive.

Good to know:

  • You can create up to 25 applications.

  • A new application works for up to 25 users. To open it to more people, use Open it to everyone, then Send for review: Drime answers within 24 hours.

  • Access tokens last 1 hour, and refresh tokens 90 days.

  • Third-party applications can never access a Vault.

Applications for A website or a server can also receive webhooks when files are created or deleted in a connected account. Each notification is signed in the X-Drime-Signature header.

#Drime Sign webhooks

In Settings > Developers > Webhooks (HTTP notifications for Drime Sign events.), click Add webhook to have your server notified when, for example:

  • a document is sent, completed or declined;

  • a signer views, signs or declines;

  • a template is created.

The Webhooks section of the Developers settings with Add webhook

Each notification is signed with a secret (X-Drime-Signature, HMAC SHA-256). A failed notification is retried up to 10 times over about 34 hours. You can Send test, Rotate secret and check the Deliveries.

#Embed a signing form on your website

In Settings > Developers > Embedding, you can let visitors sign documents without leaving your website, with the <drime-sign-form> widget. Add your domains in Allowed domains: without any domain, embedding is disabled.

#Next steps

Was this helpful?