When a Heartbeat finds something, it goes straight to the group chat already open on your phone — Feishu, WeCom, DingTalk, Slack or Discord. You do not have to open Agentic Hat, and there is nothing to install.
The point of a Heartbeat is that you do not have to watch. But if what it finds only sits in a conversation, you still have to remember to come back. Notifications remove that last step: something new, one more message in your group, and the link takes you to the conversation. Runs that find nothing are never sent — a group that pings every hour is on mute within two days.
At the right of the “My Heartbeats” row in the sidebar, press the bell icon to open notification settings. Notifications belong to your whole account: set them up once and every Heartbeat can use them; each Heartbeat then decides separately whether it notifies.
Every platform calls it a group bot and every one of them hands you a URL. All of them need a group first — a group of just you is fine:
Feishu and DingTalk group bots usually ask you to pick a security setting. Choose “custom keyword” and enter Agentic Hat. Every notification is signed with it, so it always passes. With any other keyword the receiver silently rejects the message — no error, and nothing in the group. When that happens now, the reason is written on that row in notification settings.
A Heartbeat protects itself: if it reports several times and nobody responds, it stops rather than keep spending credits. A notification that reached your group counts as you having seen it — you do not have to come back and open the conversation just to keep it running. It only stops when, several times in a row, nothing was delivered and you never opened its conversation.
Muted means it keeps running but does not post to the group — findings are still written to the conversation. Paused means the Heartbeat does not run and spends nothing. Want quiet for a few days without missing anything? Mute. Do not want to spend credits on it? Pause.
Anyone holding the webhook URL can post to your group. So once it is saved, only the host and the last few characters are shown; the full URL is never displayed again to anyone and never written to logs. Only https URLs are accepted, and URLs pointing at internal networks are refused. If you think it has leaked, delete the bot in the group and create a new one.