Skip to main content

Webhooks

Each agent can have one webhook URL that receives all of that agent’s events as signed JSON POSTs. For local agents without a public URL, prefer the persistent Agent Relay.

Configure a webhook

The response returns the full signing secret once. On later reads it is masked.

Verify the signature

Each delivery includes an HMAC-SHA256 signature of the raw request body in a header (default X-Webhook-Signature). Verify it before trusting the payload:
You can set a custom signature header (e.g. X-Hub-Signature-256 for GitHub-style verification) via the signature_header field when configuring the webhook.

Manage & test

test fires a webhook.test event through the exact same pipeline as real events — a successful delivery confirms the whole chain is wired correctly.