Connect Calendly to Fondoo
Create the token under Integrations & apps > API and webhooks > Personal access tokens. Webhook subscriptions need a paid plan (UNCERTAIN which tier). Fondoo sends webhookSigningKey as the subscription signing key. Cancelling an event notifies the invitee and needs owner approval for agents.
Credentials
apiKey: Personal access token; webhookSigningKey: optional secret, 16–200 characters; required to create subscriptions or verify signatures.
Permissions
Personal access token permissions apply to the connected user and organization. test() confirms only users.me.
Capabilities
Read: users.me, event_types.list, scheduled_events.list, scheduled_events.get, invitees.list, webhooks.list, webhooks.verify, webhooks.parse. Write: scheduling_links.create, webhooks.create. Destructive: scheduled_events.cancel, webhooks.delete; agents need owner approval.
Webhooks
Subscriptions support invitee.created, invitee.canceled, invitee_no_show.created, invitee_no_show.deleted, routing_form_submission.created. Verify the raw body using calendly-webhook-signature HMAC-SHA256 and a 180-second replay window. Parsing returns identifiers and timestamps only.
Limits and uncertainties
60 requests per 60 seconds is a conservative budget (UNCERTAIN). Paid webhook plan tier is UNCERTAIN. API documentation.