The Discord node sends a message to a Discord channel via an Incoming Webhook.
The Discord node sends a message to a Discord channel via an Incoming Webhook. Use it for alerts, workflow notifications, bot-like replies, and error reporting.
The webhook URL stored in the credential must use http:// or https:// and resolve only to public addresses. Loopback, private, link-local, multicast, and cloud-metadata destinations are blocked.
Heym validates the resolved addresses and pins the connection target before sending, so a DNS answer cannot move the request onto an internal address after the check. Environment proxies are disabled while the guard is active, and redirects are not followed.
Deployments that post to an internal webhook receiver can set HEYM_HTTP_ALLOW_PRIVATE_URLS=true on a trusted self-hosted instance. Keep the default on hosted or multi-tenant deployments.
Upgrade note for v0.0.109: this check is new for Discord. A credential whose webhook URL points at loopback or a private address is refused unless the setting above is enabled.
Related
Discord Trigger – Start a workflow from incoming Discord interactions