Hey @Olly_Warren, after the Asana API sends the x-hook-secret and you send it back as specified in the documentation it will actually send an x-hook-signature back after in the header that you have to send back as well. So pretty much the same step that you performed with the x-hook-secret but with the x-hook-signature. They fail to explain this in the documentation.