invalid_url_target
The destination host is not a publicly reachable address, so we refuse to deliver to it: private ranges (RFC 1918), loopback, link-local, CGNAT (100.64.0.0/10), IPv6 ULA (fc00::/7) and multicast are all rejected. Despite the wording of the message, the restriction applies in every environment, not only in production.
| Code | Type | HTTP | Category |
|---|---|---|---|
invalid_url_target | invalid_request_error | 422 | Webhooks |
Cause
The destination host is not a publicly reachable address, so we refuse to deliver to it: private ranges (RFC 1918), loopback, link-local, CGNAT (100.64.0.0/10), IPv6 ULA (fc00::/7) and multicast are all rejected. Despite the wording of the message, the restriction applies in every environment, not only in production.
What to do
Point the endpoint at an HTTPS host that resolves publicly. To receive webhooks on a local machine, expose it through a tunnel that gives you a public hostname — the EGRESS_ALLOW_PRIVATE_TARGETS switch is a development-only escape hatch and is never on in the platform your integration talks to.