Build a replay-safe Zapier workflow

WaterMark combines signed event webhooks, checkpointed read exports, and two deliberately narrow Zapier actions without opening customer, job, invoice, payment, or credential mutation.

Where: Manage company -> Setup -> Webhooks & API -> Advanced automation

1. Create a separate API key with read plus automation only after the owner reviews the exact boundary.
2. Subscribe the Zapier workflow to a signed WaterMark event such as job.completed or invoice.paid.
3. Read current or incremental customer, job, invoice, and payment data using the documented cursor checkpoint.
4. For an action, include a unique Idempotency-Key and create only an office task or a non-access customer note.