Jira issue updated webhook payload example

Jira · event: jira:issue_updated · content type: application/json; charset=UTF-8

This is a representative sample — fake IDs, real structure. To see a payload with your data, point the provider at a capture URL (button below).

Headers

content-type: application/json; charset=UTF-8
x-atlassian-webhook-identifier: 8a4f3c1e-92b7-4d6a-b0e5-3f7c9d2a1e84
x-atlassian-webhook-flow: Primary
x-hub-signature: sha256=f5e51b675ee90ec29adc74a375902f3de319244036491d24ded9c41f71b07836

Body

{
  "timestamp": 1787990400214,
  "webhookEvent": "jira:issue_updated",
  "issue_event_type_name": "issue_updated",
  "user": {
    "self": "https://acme.atlassian.net/rest/api/2/user?accountId=5b10a2844c20165700ede21g",
    "accountId": "5b10a2844c20165700ede21g",
    "displayName": "Ada Deveraux",
    "active": true,
    "timeZone": "Europe/Paris",
    "accountType": "atlassian"
  },
  "issue": {
    "id": "10002",
    "self": "https://acme.atlassian.net/rest/api/2/issue/10002",
    "key": "ENG-1778",
    "fields": {
      "summary": "Webhook handler drops out-of-order deliveries",
      "issuetype": {
        "id": "10001",
        "name": "Bug",
        "subtask": false
      },
      "project": {
        "id": "10000",
        "key": "ENG",
        "name": "Engineering"
      },
      "priority": {
        "id": "2",
        "name": "High"
      },
      "status": {
        "id": "3",
        "name": "In Progress",
        "statusCategory": {
          "id": 4,
          "key": "indeterminate",
          "name": "In Progress"
        }
      },
      "assignee": {
        "accountId": "5b10a2844c20165700ede21g",
        "displayName": "Ada Deveraux"
      },
      "labels": [
        "webhooks"
      ],
      "created": "2026-08-20T09:12:44.000+0000",
      "updated": "2026-08-29T19:30:00.214+0000"
    }
  },
  "changelog": {
    "id": "10538",
    "items": [
      {
        "field": "priority",
        "fieldtype": "jira",
        "fieldId": "priority",
        "from": "3",
        "fromString": "Medium",
        "to": "2",
        "toString": "High"
      }
    ]
  }
}

Things that bite people

• This example's signature actually verifies: register the webhook via the REST API with a secret and Jira sends X-Hub-Signature: sha256=<hex HMAC-SHA256 of the raw body> (WebSub format — Atlassian's own test vector: secret It's a Secret to Everybody + body Hello World! → sha256=a4771c39…3263c9). Sample secret here: jira_sample_secret_G8j4166a5OkXRD4 — check it in the signature debugger (generic scheme, header x-hub-signature). You can't read the secret back after registering; lose it and you rotate it.
• Delivery is at-least-once: retries (up to 5, each 5–15 minutes after the previous with randomized backoff) happen on 408/409/425/429/5xx or connection failure/timeout — but not on other 4xx. Dedupe with X-Atlassian-Webhook-Identifier (unique per webhook, identical across retries); X-Atlassian-Webhook-Retry carries the retry count. While your endpoint keeps failing past 30 minutes, Jira degrades to a single attempt per webhook until one succeeds.
• changelog.items[] tells you what changed (fromString/toString) — without it you're diffing full issue snapshots. The issue field is the same shape as REST GET /rest/api/2/issue/… with no expands; user is condensed (no emailAddress, locale, or groups).
• Endpoint rules: HTTPS only with a globally-trusted CA cert, port 80 is not allowed (443/8443/8080 and a short list are), and Jira follows up to 5 redirects — unusual (GitHub follows none).
• X-Atlassian-Webhook-Flow: Secondary marks deliveries from bulk/cascade operations (bulk edits, project deletes) — those may arrive up to 15 minutes late, vs ~30 seconds for Primary. Filter noise at the source with a JQL scope, field filters, or excludeBody; URL variables like {issue.key} can route without parsing the body.

Send it yourself

Reproduce this delivery against any endpoint (your handler, a bin, staging):

$ curl -X POST https://your-endpoint.example/hook \
  -H 'content-type: application/json; charset=UTF-8' \
  -H 'x-atlassian-webhook-identifier: 8a4f3c1e-92b7-4d6a-b0e5-3f7c9d2a1e84' \
  -H 'x-atlassian-webhook-flow: Primary' \
  -H 'x-hub-signature: sha256=f5e51b675ee90ec29adc74a375902f3de319244036491d24ded9c41f71b07836' \
 -d '{
  "timestamp": 1787990400214,
  "webhookEvent": "jira:issue_updated",
  "issue_event_type_name": "issue_updated",
  "user": {
    "self": "https://acme.atlassian.net/rest/api/2/user?accountId=5b10a2844c20165700ede21g",
    "accountId": "5b10a2844c20165700ede21g",
    "displayName": "Ada Deveraux",
    "active": true,
    "timeZone": "Europe/Paris",
    "accountType": "atlassian"
  },
  "issue": {
    "id": "10002",
    "self": "https://acme.atlassian.net/rest/api/2/issue/10002",
    "key": "ENG-1778",
    "fields": {
      "summary": "Webhook handler drops out-of-order deliveries",
      "issuetype": {
        "id": "10001",
        "name": "Bug",
        "subtask": false
      },
      "project": {
        "id": "10000",
        "key": "ENG",
        "name": "Engineering"
      },
      "priority": {
        "id": "2",
        "name": "High"
      },
      "status": {
        "id": "3",
        "name": "In Progress",
        "statusCategory": {
          "id": 4,
          "key": "indeterminate",
          "name": "In Progress"
        }
      },
      "assignee": {
        "accountId": "5b10a2844c20165700ede21g",
        "displayName": "Ada Deveraux"
      },
      "labels": [
        "webhooks"
      ],
      "created": "2026-08-20T09:12:44.000+0000",
      "updated": "2026-08-29T19:30:00.214+0000"
    }
  },
  "changelog": {
    "id": "10538",
    "items": [
      {
        "field": "priority",
        "fieldtype": "jira",
        "fieldId": "priority",
        "from": "3",
        "fromString": "Medium",
        "to": "2",
        "toString": "High"
      }
    ]
  }
}'

← All payload examples · Signature debugger · Docs