Per My Last Webhook
A drop-in replacement for the deprecated Office 365 Connectors. Normalize webhook events from sixteen CI/CD, GitOps, observability & incident tools into one Teams app, with rate limiting, retries, and an audit trail.
Multi-tenant Entra OAuth · audit log · per-org rate limits · encrypted secrets at rest
Jenkins, GitHub Actions, GitLab, Azure Pipelines, Buildkite, CircleCI, Bitbucket, Argo CD, TeamCity, Datadog, Grafana, Drone, Sentry, PagerDuty, Alertmanager, and Octopus Deploy — CI/CD, GitOps, observability, and incidents, normalized to one common event model. Add another by writing one adapter, or use the generic JSON webhook.
Stateless Teams Workflows webhooks, or the Bot Framework with
in-place card updates so one card flips
started → success rather than spawning two.
Microsoft Entra Bearer tokens on the management plane. Admin-consent install flow with HMAC-signed state. Per-tenant isolation enforced at the data layer, not the UI.
Post an Approve / Reject card to a channel and pause the pipeline until a human clicks. Decisions are idempotent and audit-logged with the decider's UPN.
Per-organization token-bucket rate limits with optional Redis for accurate multi-instance throttling. Exponential-backoff retries on transient Teams 5xx. Honest 207 responses on partial fan-out.
Every mutation lands in a 90-day TTL'd audit log with actor UPN, source IP, and target entity. Browse it in the admin UI or fetch via the API.
A Microsoft 365 admin grants tenant-wide consent. The
installations record is created; users in the tenant
can now manage subscriptions.
Pick a channel, paste a Teams Workflows webhook URL, choose a CI
platform. We hand you a per-subscription
ingestUrl with auth baked into the path.
Use your platform's native webhook UI. No relay, no plugin, no deploy. Events start flowing immediately; the Test button verifies end-to-end in one click.
A small React + MSAL SPA the Function App serves at
/api/ui/. Light or dark, subscription CRUD, approval
inbox, audit log, billing.
The simplest path is the Teams Store listing. If you'd rather self-host, the source is on GitHub with Bicep templates that stand up the full Azure footprint (Functions, Cosmos, Key Vault, Application Insights) and a smoke-gated CI release path.
git clone https://github.com/bronette/permylastwebhook
cd permylastwebhook
./infra/deploy.ps1 -ResourceGroup my-rg -Location eastus \
-BaseName mytdc -Environment devSelf-hosting is fully supported and there is no licence fee for it. The hosted plan only adds managed infrastructure, billing, and a status page.
It's me — and my dog Yogi. Yogi handles moral support and aggressive napping; he doesn't code much, though he did once step on the keyboard and ship a semicolon that, frankly, needed to be there. We operate out of Coeur d'Alene, Idaho — the world-renowned tech hub of innovation,* where the nearest FAANG office is a four-hour drive and daily standup is me telling the dog what I'm working on.
Jokes aside: I genuinely love writing quality software. Not "move-fast-and-leave-the-race-conditions-in" software — the kind with real tests, honest error handling, and an audit trail, built by someone who'll be personally embarrassed if it breaks. Office 365 Connectors got deprecated out from under everyone, so I built the replacement I wanted to use and put my name (well, the webhook's name) on it.
No VC, no growth team, no "synergy." Just careful code, a fair price, and a human who reads every support email. Yogi reads none of them. He is the face of the company and contributes nothing.
*Citation pending. It is, however, genuinely beautiful here, the lake is real, and the dog is very good.
Microsoft retired the Office 365 Connectors for Microsoft Teams. Existing connectors have been switched off; new ones can no longer be created. This service is the replacement.
Teams Workflows webhook URLs are stored encrypted in Azure Key Vault. The management plane requires Entra Bearer tokens. Audit entries record every mutation. See the Privacy Policy for the full picture.
Anything that includes Teams and lets the tenant admin grant application consent. Most Business and Enterprise SKUs qualify.
Yes. The admin UI uses MSAL against your tenant's Entra ID; users sign in with their existing Microsoft 365 account.
Yes. The entire codebase is open. Bicep templates and a deploy script stand up the full Azure footprint in one command.
Private-network ingestion, more delivery channels (Slack, Discord), and richer per-subscription branding. See the GitHub repository for the current backlog.