Webhook URLs

TradingView cannot send headers, so the webhook URL itself is the secret. Anyone with the URL can post alerts to your automation.

How it is stored

Pineflows stores only a hash of the token in the URL. The full URL is viewable for 10 minutes after an automation is created or the webhook is rotated, in your workspace and through the get_automation_status tool. After that it cannot be shown again; rotate to get a new one.

Rotating

Rotate from the workspace or ask Claude. The old URL stops working immediately. Paste the new URL into the TradingView alert's Webhook URL field, otherwise the alert goes to a dead address.

If you rotated from the workspace while Claude was mid-setup, Claude sees a "webhook rotated" event in the status and hands you the current URL.

What happens to an alert

• Recognized — mapped to a signal. In test mode it is recorded; in live mode it becomes a Robinhood market order.
• Duplicate — the same alert received twice within the dedupe window is ignored.
• Unrecognized — logged with the raw body so the adapter can be fixed.
• Paused — recorded as blocked, nothing executes.
• Plan needed — the free trial ended and there is no subscription. Recorded, nothing executes, until you subscribe.

Alert bodies are truncated to 2 KB.