The discussion revolves around the issue of a Discourse webhook displaying private messages. nexo is facing this problem with their webhook, which is set to push “post event” notifications, but it includes private messages. nexo also expresses concern that anyone can view private messages, even if they’re not invited to them.
vinothkannans explains that it’s not possible to filter private message replies in post event webhooks, but suggests using a custom plugin as a solution.
david notes that the screenshot provided by nexo appears to be from Discord, and recommends using the discourse-chat-integration plugin instead of webhooks, as it provides more filtering options.
I chose my webhook to only push post event because it covers both new topics made and new posts/replies made.
The issue: it alerts everytime someone sends a private message. I know that private messages are technically a topic but shouldn’t there be a way to block that out or at least only deliver topic replies and creations?
Also, anyone can click to view the private message even if theyre not invited to it 
It’s not possible to filter pm replies in post event webhooks. But you can do it via a custom plugin.
If you are not an admin and don’t have access to the PM then you can’t view the messages in it.
that screenshot looks like Discord to me. Have you thought about using the discourse-chat-integration plugin instead of webhooks? It provides loads of filtering options:
