Skip to content
14-day refund · Free plugin on WordPress.org
Yatra
Yatra Pro · Agency Integration

Outbound integrations, signed and reliable.

Push every Yatra event to your CRM, Zapier, Slack or anywhere — Stripe-style.

Wire Yatra into your custom tech stack with HMAC-signed HTTPS webhooks. Real-time event capture so you pick fields from the actual payload, not skeleton guesswork. Automatic retry with backoff, full delivery log with replay, encrypted per-endpoint secrets. The integration backbone agencies have been hand-rolling — now a toggle.

You stop paying for $50–500 / mo iPaaS

Single payment per year · 30-site license · 14-day refund · One Pro license unlocks every module on this tier.

Webhooks — Yatra WordPress travel booking plugin (Agency Pro module)

Why Webhooks matters for tour operators

Most plugins fire WordPress hooks and call that "integration". That works for one developer on one site — it doesn't scale to "my agency needs Yatra bookings flowing into HubSpot, payments into Xero, enquiries pinging Slack". Agencies either pay $50–500/month for an iPaaS (Zapier Pro, Make, Workato) to bridge the gap, OR they hand-build a webhook system per project — secret rotation, HMAC signing, retry logic, replay UI, the works. Yatra Webhooks ships all of that out of the box on the Agency tier. No SaaS bill. No bespoke code.

What changes once Webhooks is on

Concrete operational outcomes — not feature checkboxes.

  • Pabbly-style listen mode — capture a real event firing, pick fields from the ACTUAL payload, no skeleton guesswork.
  • HMAC-SHA256 signed every request — receivers verify with copy-paste PHP / Node / Python snippets included in the secret reveal dialog.
  • Automatic retry with exponential backoff (60s, 5min, 30min, 1h) + jitter so retry storms don't hammer a recovering receiver.
  • Auto-disable after 10 consecutive failures — your queue doesn't back up forever on a dead receiver.
  • Parked-not-failed deliveries when an endpoint is temporarily inactive — re-enable and they auto-resume.
  • Full 90-day delivery log with payload + response inspection + one-click replay. Or turn logging off per endpoint for high-volume sources.

What Webhooks unlocks in Yatra

Every surface, every toggle, every audit trail — covered.

Endpoints tab

One row per receiver, bound to exactly one Yatra event. Custom HTTP headers (Authorization, X-Tenant-Id, etc.), additional static payload fields, encrypted signing secret. Health metric column showing success rate over last 100 deliveries.

Listen for sample

Pabbly / Zapier-style real-time capture. Arm the listener, perform the action in Yatra, see the actual JSON. No hand-crafted skeleton, no "trust me, that's what it'll look like".

Field selector

Pick exactly which fields ship. Original key nesting preserved (customer.email arrives as data.customer.email). Strip PII or fields a downstream system bills you per. Live preview shows the exact JSON your receiver will get.

Deliveries tab

Every outbound POST attempt with status, attempts, duration. Filter by endpoint / event / status. Click any row to inspect the full payload + receiver response. Replay failed deliveries from the inspector.

Receiver verification snippets

Copy-paste PHP, Node, Python code in the secret-reveal dialog. Includes timestamp replay protection (±5 min) and timing-safe compare. Drop in, ship.

Audit hooks

yatra_webhook_endpoint_created / _updated / _deleted / _secret_regenerated fire with the acting user id for SIEM ingestion.

The SaaS this replaces

Same capability. Without the monthly bill or the data middleman.

Tool
Their pricing
The catch
Zapier (Professional)
$49+/mo
Per-task pricing — bills you per booking event. Sits between you and your CRM.
Make (Pro)
$29+/mo
Per-operation pricing. Two operations per webhook means double cost.
Workato / Tray.io
$500+/mo
Enterprise iPaaS. Powerful, expensive. Overkill for "post booking JSON to my CRM".
Hand-rolled webhook system
40–80h engineering
HMAC signing + retry + signing key rotation + replay UI is its own project.
Yatra Pro · Agency plan
One yearly payment. Every module included.
No catch. Your data stays on your WordPress.

How to set up Webhooks in Yatra

No engineering. Open Yatra → Modules, toggle, follow the wizard.

  1. 1

    Enable + add endpoint

    Toggle Webhooks on under Yatra → Modules. Open Yatra → Webhooks → Add endpoint. Paste your receiver URL.

  2. 2

    Pick the event

    Single-select dropdown — one endpoint = one event (so field selection is unambiguous). Same UX as Yatra's Email Automation event picker.

  3. 3

    Listen for sample

    Click "Listen for sample", then trigger the event in Yatra (create a booking, etc.). The form captures the real payload and populates the field selector.

  4. 4

    Pick fields, save, verify

    Choose fields (or send everything), save — the signing secret is shown once with PHP/Node/Python verification snippets. Hit Ping to send a synthetic test event and watch the inspector live.

Webhooks pay for themselves the moment your iPaaS subscription renews.

Replaces Zapier Pro / Make at moderate scale
$348–$1,188 / year
Per-task pricing scales as your bookings do.
Yatra Agency Yearly — every module on 30 sites
from $499 / year
Sale price. Auto-renews at $699/yr. Cancel anytime.
Yatra Agency Lifetime — every module on 15 sites
$1,999 one-time
Pay once. Updates + support forever.

Webhooks — Yatra Pro FAQ

Want to feel Webhooks in action first? Try Yatra Pro free →

Why is this Agency-only? Couldn't every operator use webhooks?
Smaller operators get more value from Email Automation, WhatsApp, and the in-app modules — which cover most "tell my customer / tell my team" needs without writing a receiver. Webhooks are the integration backbone for agencies wiring Yatra into a bigger custom tech stack (CRM, ERP, data warehouse, multi-tenant ingest). That use case is Agency-shaped.
How is this different from WordPress action hooks?
Action hooks fire in-process — your custom code has to run on the same WordPress install. Webhooks fire OUT — to any HTTPS receiver, anywhere, with a signed payload and retry guarantees. They solve "tell my CRM running on a different server" rather than "do something local".
What happens during a receiver outage?
Failed deliveries auto-retry up to 5 times with exponential backoff (60s, 5min, 30min, 1h). After exhaustion they're marked permanent failure. 10 consecutive permanent failures auto-disable the endpoint so the queue doesn't back up forever. When you re-enable, parked deliveries auto-resume; previously-permanently-failed ones can be bulk-replayed from the inspector.
Can I send only a subset of fields to my receiver?
Yes — that's the field selector. Click "Listen for sample", trigger the event, then tick which dot-paths to forward. The "Output" preview tab shows you the exact JSON bytes your receiver will get, live as you tick. Original key nesting is preserved (customer.email arrives as data.customer.email, not flattened).
How are signing secrets stored?
libsodium AEAD (XSalsa20-Poly1305) by default, OpenSSL AES-256-GCM as fallback. The encryption key derives from your WordPress AUTH_KEY + SECURE_AUTH_KEY via HKDF-SHA256 — copy the database to another server without the salts and secrets can't decrypt. The plaintext is shown ONCE in the secret-reveal dialog after create / regenerate and never displayed again. Last-4 hint is all the UI shows after that.
Can the same event fire multiple webhooks?
Yes. Create multiple endpoints — each with its own URL, signing secret, field selection, custom headers. Subscribe one to booking.created for your CRM and another to booking.created for your accounting tool. Both fire on every booking, each filtered independently.
Does Yatra see the payloads in transit?
No. Yatra POSTs directly from your WordPress server to your receiver. No proxy, no markup, no third party in the middle. We can't see the payloads even if we wanted to — they go straight from your WP to your endpoint.

Add Webhooks to your tour-booking website today.

Yatra Pro · Agency tier · Yearly or Lifetime · Agency only

14-day refund · One license unlocks every module on your tier.