Connect Expo to Fondoo

Live2 min readUpdated October 2026

Create an Expo access token and set the EAS project ID. Builds can be listed and cancelled; creating builds, submissions or updates needs the EAS CLI and is unsupported here.

Official documentation: https://docs.expo.dev/eas/webhooks/

Credentials

accessToken (secret, Expo access token, 20-200 characters; see https://docs.expo.dev/accounts/programmatic-access/); appId (public, optional EAS project ID, UUID); webhookSecret (secret, optional, 16-300 characters).

Permissions

The access token's account access applies; permissions beyond the test query are not verified (UNCERTAIN).

Capabilities

builds.list, builds.get, submissions.list, updates.list, webhooks.verify, webhooks.parse (read)
builds.cancel (write)

Webhooks

webhooks.verify checks expo-signature (sha1 HMAC of the raw body with the webhook secret) in constant time; there is no timestamp, so no replay window (UNCERTAIN). Dedupe on eventId from webhooks.parse.

Limits and uncertainties

Creating builds, submissions or updates is unsupported (needs the EAS CLI and a source upload); Expo query shapes are UNCERTAIN because the API is not formally documented; offset is limited to 0-10000.