← Back to blog
BLOG

A Webhook URL Has to Be a Public Address

EngineeringNovember 12, 2026 · PLLAY Team

A private, loopback or internal address is refused when a webhook URL is registered, when it is updated, and when PLLAY sends.

PLLAY delivers a result to the webhook URL on your integration. That URL has to be a public address. PLLAY refuses a non-public URL, including a private address, a loopback address, or an internal address.

The refusal happens when the URL is registered, when the URL is updated, and again when PLLAY is about to send. A refused URL is not accepted. PLLAY does not send the result to it.

The webhook is how your product hears the result. You keep the player relationship, and you act on settled, held or voided in your own product. The URL is the address of that integration. PLLAY will not deliver a result to a private network, a loopback address, or an internal host.

Use a public address that your systems receive. If you change the endpoint, the new URL is checked the same way. Your integration still handles three states: settled, held and voided.

Setup is arranged with the PLLAY team for each partner, starting with a sandbox key. Platforms, publishers and media companies that want these results in their own product can start at access@pllay.io.