Question 1

What are Webhooks and how do I use them to receive notifications when Workflows are completed?

Accepted Answer

Webhooks allow you to set up your own integrations to Malcolm! Workflow.

Webhooks are endpoints on web servers you own. Whenever a Workflow is completed the configured Webhooks will be notified. The Payload will contain the completed Workflow Session, related Workflow and (optionally) the submitted Workflow Values.

Configuration

Webhooks are are configured in "Workflows > Edit > Configure > Webhooks" section of MyMalcolm.

Webhook URL

The only requirement is to provide the URL of your Webhook. This is the URL Malcolm! will send the Payload to.

The URL should be a secure endpoint which means it should start with https://, although we do support http:// too. The endpoint should also be accessible which means hosted on a remote machine, not behind a firewall and not requiring Authentication.

Include the Workflow Values

There is an additional option to include the submitted Workflow Values in the Payload. This option is disabled by default for security reasons but available to use should you wish to enable it. By enabling the option you agree to the following terms -

(a) I would like the Workflow Values included in the Webhook Payload (b) the recieving web server is private and properly secured (c) I am aware the use of Webhooks can facilitate the transfer of end-user personal data to third party Data Processors and my use of Webhooks adheres to my responsibilities as Data Controller under applicable Data Protection Laws.

Secure your Webhook with a secret token

Webhook URLs can be called by anyone and are therefore insecure.

To ensure a request to your Webhook URL comes from Malcolm! a secret token known only by yourself and Malcolm! can be used to generate a Signature.

Malcolm! will take the Payload and the secret and create a Signature. This will be passed to your App as the request header X-Signature. Your App will use the same secret and the received Payload to generate a second Signature. If the Signatures match you know the request came from Malcolm! and not another source.

The secret token can be any string you like, but Malcolm! recommends using a random string of at least 36 characters. For example in a Terminal window run -

ruby -rsecurerandom -e 'puts SecureRandom.hex(18)'

To validate the Payload from Malcolm! use the HMAC SHA-256 algorithm to create a hash using the Payload as the data and your secret as the key.

For example in PHP use the hash_hmac function to generate a binary hash.

$key = 'Your secret token'; $data = file_get_contents('php://input'); $hash = hash_hmac('sha256', $data, $key, true); // true = output raw binary data

Next encode the binary hash using a Base 64 encoder, in PHP this is the base64_encode function.

$encoded_hash = base64_encode($hash);

Finally prefix the encoded hash with "sha256=" and compare with the value of X-Signature. In PHP you can use the $_SERVER variable to access the headers.

$signature = 'sha256=' . $encoded_hash; if ($_SERVER['HTTP_X_SIGNATURE'] === $signature) { // Request is valid }

Conditional settings

There are conditional controls available too. If you have a condition configured the Webhook will only be notified if the conditions at the end of the Workflow are satisfied.

Headers

The HTTP POST will contain the following Headers.

Header Description Host The Host of your Webhook URL. Content-Type With value "application/json" X-Instance-Id The ID of the Instance. X-Signature The request Signature, if using a secret token.

Payload

The Payload will be a JSON Body containing the Workflow Session.

Attribute Type Description id string The ID of the Workflow Session. label string A descriptive label, which will include the name of the person who completed the Workflow if your Workflow contains name attributes. description string An extended version of the label which also includes the Workflow name. text string The same as the description but often a attribute named "text" is automatically picked up by some services. locale string The locale used during the Workflow Session. started-at string The date and time the Workflow Session was started, in ISO 8601 format. completed-at string The date and time the Workflow Session was completed, in ISO 8601 format. workflow object[Workflow] The related Workflow. values array[Value] The submitted Workflow Values (if included).

Workflows are defined as -

Attribute Type Description id string The ID of the Workflow. name string The name of the Workflow. published-at string The date and time the Workflow was published, in ISO 8601 format. version string The name of the Workflow version.

Workflow Values are defined as -

Attribute Type Description id string The ID of the Workflow Value. field object[Field] The related Workflow Field. value mixed The submitted value.

Workflow Fields are defined as -

Attribute Type Description id string The ID of the Workflow Field. name string The name of the Workflow Field. query-name string The URL query name for the Workflow Field if defined.

Example

POST /webhook HTTP/1.1 Host: yourdomain.com Content-Type: application/json X-Instance-Id: xxxxxxxxxx X-Signature: xxxxxxxxxx { "id": "xxxxxxxxxx", "label": "Completed by Tom Jordan", "description": "Workflow \"Open Support Ticket\" was completed by Tom Jordan.", "text": "Workflow \"Open Support Ticket\" was completed by Tom Jordan.", "locale": "en-GB", "started-at": "2020-04-01T12:00:00+00:00", "completed-at": "2020-04-01T12:05:00+00:00", "workflow": { "id": "xxxxxxxxxx", "name": "Open Support Ticket", "published-at": "2020-04-01T09:00:00+00:00", "version": "Version 1" }, "values": [ { "id": "xxxxxxxxxx", "field": { "id": "xxxxxxxxxx", "name": "Your name", "query-name": "name" }, "value": "Tom Jordan" }, { "id": "xxxxxxxxxx", "field": { "id": "xxxxxxxxxx", "name": "Your email address", "query-name": "email" }, "value": "tom.jordan@malcolm.support" } ] }

Question 2

How do I embed content from Malcolm! into my own website or app?

Accepted Answer

You can easily embed content from Malcolm! into your existing website, app, product or online service with just a few lines of code.

Begin by going to the Share section of MyMalcolm and then select Embed.

We offer the following type of embeds:

Floating Widget (with button and draw options) - this option floats a button or drawer “pre-expand” over your site, application, product or service - when clicked a content panel opens up
Overlay / Pop Up - this opens an overlay / popup over whatever the user is currently seeing - it’s triggered by a link you can place wherever you want in your site, application, product or service
Inline - pull content directly into the same pages/screens your users are seeing with this option - use blend mode for a truly seamless experience!

We also offer a fourth option which can be useful in some circumstances:

Redirect - this option creates an automatic redirect which will replace the page the embed is fired from with a Malcolm! hosted page. This is achieved by auto forwarding the user. This option can be useful in certain scenarios, for example if you constrained by only being able to publish via a CMS and want some navigation or pages within your CMS structure to link out to Malcolm! hosted content. Note you will likely want to use URL rules in conjunction with the redirect embed (otherwise the redirect will happen on all pages the embed is present on!).

In terms of the type of content you can embed options include:

Hosted Hub results - paginated results showing the default filtered FAQs and Workflows as seen on your Hosted Hub homepage
A single FAQ - your choice of FAQ
A single Workflow - your choice of Workflow
Author listing - paginated results showing FAQs from a particular author
Category listing paginated results showing FAQs within a partiuclar category
Filtered results paginated results showing FAQs and Workflows filtered by your choice of filter (eg most popular, most recent, most helpful etc)
Search results (contextual) - paginated results showing FAQs and Workflows according to a search query provided via a meta tag on your page
Search results (specified search query) - paginated results showing FAQs and Workflows according to a given search query
Tag listing - paginated results showing FAQs referenced by particular tag

Note that if you just want to embed a single FAQ or Workflow you can also access a quick embed interface via the Library in both the FAQ and Workflow sections of MyMalcolm. Simply select "Embed" from the menu accessible on the right hand side of the respective published FAQ or Workflow.

You can configure various options around the visual stlye of your embed. The exact options available depend on the type of embed you have chosen.

When you have finished configuring the content and visual appearence of your embed, Malcolm! will give you the code that can be used to pull your content into your website, app, product or online service.

Watch a video guide to embeding Malcolm! content into your website below.

Question 3

How do I use Make (formerly Integromat) to connect Malcolm! to other applications or services I use?

Accepted Answer

Malcolm! now integrates with Make (formerly Integromat). Make is an integration platform - it connects thousands of apps to other apps.

In the context of Malcolm! this means that when a Workflow is completed you can use our Make integration to route some or all of the data that has been collected from that Workflow through into Make and then in turn onto thousands of other apps or services.

Here is how to set things up:

Firstly set up and publish a workflow in Malcolm! that collects the data you wish to move into other applications
In MyMalcolm go to the Settings Section, then Workflows, then Integrations, then click on Make

Sign up for an account at Make if you don't already have one - it is free - or login if you do have an account
In Make click "Create a new scenario"
Search or browse to the third party app/s or service/s you wish to link to your Workflow, select them, then click continue
You will then find yourself in new scenario dialogue of Make. This is where you connect Make to Malcolm! and also your third party apps or services (ie by providing your credentials). Note that Make calls the connection to Malcolm! a webhook.
You then set up the sort of interactions you want to happen when a Malcolm! Workflow is completed. For example you may wish to connect to Google Sheets and have a new row containing the data submitted each time a Workflow is completed. There are also many other powerful options and settings that can be configured from this area. For more detals see Make's guides.

Once you have set things up, you can test the integration by clicking "Run Once" in the Integromat interface, then complete the Malcolm! Workflow in question. The actions you have configured in Integromat should then happen, or you may see details of errors that need correcting.
When you are happy you can then set the scenario to run immediately (ie each time a Workfow is completed) or periodically.
Back in MyMalcolm, if you find the Workflow you set up with Integromat in the Library, select it, then go to Configure then Integrations you should be able to see Integromat has been added. You can turn the integation off here if you want and/or configure it to be conditional (for example to only run when certain choices have been made on a Workflow).

You can also see a video walkthrough below

Remember that Malcolm! always stores your data (which you can download anytime) - so if Integromat goes down or your integration doesn't seem to work properly no data will be lost.

We are hugely excited about the possibilities opened up via Integromat - we hope you are too! If you have questions or need a hand setting things up just contact us and we'll be happy to help.

Question 4

Do you support animated GIFs?

Accepted Answer

Yes you can use animated GIFs in Malcolm! placing them in your FAQs or in Workflows (via the Content element).

You can upload the animated GIF into the media section of MyMalcolm or you can pull in externally hosted GIFs.

This cat has been uploaded to MyMalcolm:

To pull in external GIFs use the following Markdown syntax: ![Image Description](https://media.giphy.com/media/QpWDP1YMziaQw/source.gif)

The above Markdown results in this:

Have fun!

Question 5

How do I use Malcolm! with my own domain or sub-domain?

Accepted Answer

You can use your own domain or sub-domain with Malcolm! There is no extra cost for doing this.

To set this up go to the Settings Section in MyMalcolm then Custom Domains. Enter your custom domain and you will be given instructions on how to verify domain control/ownership and set up your DNS. We can host on SSL too and we'll automatically generate a secure certifcate for you. Once again, there is no extra cost for doing this!

Once you have set up your custom domain or sub-domain both that and your malcolm.support / malcolm.app URL will work and serve content. If you don't want the .malcolm domains to work just select the redirect option and any traffic will be redirected.

Watch a video guide to setting uo your own domain below.

Question 6

How do I use Zapier to connect Malcolm! to other applications or services I use?

Accepted Answer

Malcolm! now plugs into Zapier. Zapier is an integration platform - it connects thousands of apps to other apps.

In the context of Malcolm! this means that when a Workflow is completed you can use our Zapier integration to route some or all of the data that has been collected from that Workflow through into Zapier and then in turn onto thousands of other apps or services.

Here is how to set things up:

Firstly set up and publish a workflow in Malcolm! that collects the data you wish to move into other applications
In MyMalcolm go to the Settings Section, then Workflows, then Integrations, then click on Zapier

In the overlay you'll have an option to choose some featured popular Zapier / Malcolm! integrations or to proceed to Zapier.com to create from scratch

Sign up for an account at Zapier if you don't already have one - it is free - or login if you do have an account.

Your trigger app should be Malcolm! and you want it to trigger on a new Workflow completion so hit "Save + Continue" once you have selected this option
You now need to connect your Malcolm! instance to your Zapier account - click "Connect an Account" and follow the instructions. Once connected click "Save and Continue"
Choose a workflow then "Continue"
Wait for a sample to load and then click "Continue"
Choose an action App of your choice and configure as required - the exact process will vary from action App to action App but you are likely to need to agree some permissions and choose some options. Once done click "Save + Continue" or "Finish"
You will then be able to name your Zap and choose whether it is on or not
Back in MyMalcolm, if you find the Workflow you used in your Zap in the Library, select it, then go to Configure then Integrations you should be able to see Zapier has been added. You can turn the integation off here if you want and/or configure it to be conditional (for example to only run when certain choices have been made on a Workflow).

Remember that Malcolm! always stores your data (which you can download anytime) - so if Zapier goes down or your integration doesn't seem to work properly no data will be lost.

We are hugely excited about the possibilities opened up via Zapier - we hope you are too! If you have questions or need a hand setting things up just contact us and we'll be happy to help.

Question 7

Can I change the sender and email address in the emails Malcolm! sends my customers?

Accepted Answer

Malcolm! can send emails to your customers/users in the following situations:

Workflow email answers where you have configured the email answer to be sent to the email address specified in the Workflow
Email this answer functionality on an FAQ
Sending the resume later Workflow link
Payment confirmation email

By default these emails come from the sender "Malcolm!" with the email address noreply@malcolm.app You can now change this by connecting Malcolm! to your Mailgun or SendGrid account.

To do this, goto Settings --> Instance --> Emails and toggle Custom email sending to be active. You can then supply your Mailgun or SendGrid credentials and specify your desired sender name and email address.

You can also change the look and feel of these emails - please see this FAQ for further details.

Question 8

How do I delete data submitted to a Workflow?

Accepted Answer

You can delete some or all of the submitted data (including uploaded files) associated with a Workflow by selecting "Delete Data" in the Analyse tab of the relevant Workflow.

You can choose to delete all data or selected data between two dates. Note that as well as removing data the delete process will also remove any exports you previously generated that contain the data plus any files uploaded via the Workflow and MyMalcolm activity logs. Please therefore export and download to your local system any data you wish to keep before starting the delete process in MyMalcolm.

Ratings, analytics and feedback associated with deleted Workflow completions will be kept and can still be reviewed via MyMalcolm post delete.

Question 9

How can I use Stripe with Malcolm! to collect payment from my customers?

Accepted Answer

Malcolm! now integrates with Stripe. Stripe is a payment service provider that enables business owners to collect payment from their customers.

With our Stripe integration you can create Workflows in Malcolm! that include fields for your customers to enter their card details and pay for things like products, services, memberships etc or perhaps make a donation towards something.

Here is how to set things up:

If you don't already have a Stripe account create one here
In MyMalcolm go to the Settings, then Workflows, then Integrations, then click on Stripe
You'll be taken to a page on the Stripe website where you can login and confirm that you wish to link your Stripe account to Malcolm!
Once you have linked your Stripe account you can create Workflows via the Workflow section as usual and place payment related elements onto those Workflows. Two particular elements to pay attention to are Currency and Payments Payments is the element where your customer will provider their card details. You can configure the amount your customer is charged via the Payment element settings, or you can optionally ask the customer to enter their own amount via the Currency field - this can be useful in scenarios like donations or account payments where you may wish to offer the customer the choice of the amount to pay.

If you also collect your customers email (and Name) in the Workflow you can optionally use that information to send them a payment confirmation email. You can configre and customise this via the Payment element settings.

You can place the Payment element on any page of your Workflow, but the actual payment transaction will not be attempted until the final submit of your Workflow. If there is a problem with the payment details your customer will be returned to the page with Payment element on it and given a chance to update their details and proceed back through the Workflow.

You can see a video walkthrough below

And there you have it! Taking payments via Stripe is a really powerful and quick to implement feature of Malcolm! Workflows. Taking payments will also work when the Workflow is surfaced via our embeds, widgets and overlays too! If you have questions or need a hand setting things up just contact us and we'll be happy to help.

Question 10

How can I password-protect my hub with Memberstack?

Accepted Answer

Malcolm supports using Memberstack to password-protect your content.

This guide will help you set up Memberstack.

First go to MyMalcolm > Settings > Instance > Visibility and toggle the option to use a third party service for Hosted Hub password protection. This automatically enables the built-in password protection.

Next, from the Memberstack Dashboard, go to Dev Tools > Add Integration.
Choose a name for your integration.

Copy the Redirect URI from MyMalcolm and paste it into Memberstack.

Then, in Memberstack, press Add Integration.

Once created, in Memberstack click the Edit button next to the Integration and copy the Client ID and Secret Key.

Paste these values into the boxes in MyMalcolm.

Save the settings on both sides and you should see your Memberstack login page appear in your Hub.

How can we help?

Using Malcolm! and need help?

What do you think of Malcolm?

Most popular

What are Webhooks and how do I use them to receive notifications when Workflows are completed?

How do I embed content from Malcolm! into my own website or app?

How do I use Make (formerly Integromat) to connect Malcolm! to other applications or services I use?

Do you support animated GIFs?

How do I use Malcolm! with my own domain or sub-domain?

How do I use Zapier to connect Malcolm! to other applications or services I use?

Can I change the sender and email address in the emails Malcolm! sends my customers?

How do I delete data submitted to a Workflow?

How can I use Stripe with Malcolm! to collect payment from my customers?

How can I password-protect my hub with Memberstack?