Build an app or connect webhooks
Create an OAuth application that other Drime users connect to their accounts, receive webhooks, and get notified of Drime Sign events on your server.
To use the Drime API on your own account, a personal token is enough: see Create an API token. To build an app that other Drime users connect to their accounts, create an OAuth application: your users approve it on Drime, and it never sees their password.
#Create an OAuth application
Any signed-in user can create applications from the developer portal, My applications, then Create application.

You first choose what you are building:
Choice | For |
|---|---|
A website or a server | You get a secret key to keep on your server. |
A desktop or mobile app | Installed on your users' devices, so no secret key. |
A script, just for me | A small tool you run yourself. |
Then you choose what the application needs: A folder of its own (it only ever sees one folder, created in the Drive) or The whole Drive.
Good to know:
You can create up to 25 applications.
A new application works for up to 25 users. To open it to more people, use Open it to everyone, then Send for review: Drime answers within 24 hours.
Access tokens last 1 hour, and refresh tokens 90 days.
Third-party applications can never access a Vault.
Applications for A website or a server can also receive webhooks when files are created or deleted in a connected account. Each notification is signed in the X-Drime-Signature header.
#Drime Sign webhooks
In Settings > Developers > Webhooks (HTTP notifications for Drime Sign events.), click Add webhook to have your server notified when, for example:
a document is sent, completed or declined;
a signer views, signs or declines;
a template is created.

Each notification is signed with a secret (X-Drime-Signature, HMAC SHA-256). A failed notification is retried up to 10 times over about 34 hours. You can Send test, Rotate secret and check the Deliveries.
#Embed a signing form on your website
In Settings > Developers > Embedding, you can let visitors sign documents without leaving your website, with the <drime-sign-form> widget. Add your domains in Allowed domains: without any domain, embedding is disabled.
#Next steps
Was this helpful?