Watchlist

Webhook signing secret

Watchlist alerts are POSTed to each entry's webhook_url as JSON events (type: company.alert). Verify the CompanyStack-Signature header: t=<unix seconds>,v1=<hex HMAC-SHA256(secret, "<t>.<raw body>")>, compare in constant time, reject timestamps older than 5 minutes, and de-duplicate on CompanyStack-Event-Id. Failed deliveries are retried after 1m, 5m, 30m, 2h, 6h, 12h and 24h.

get/watchlist/webhook-secret

Request

  • Base URL: https://api.companystack.co.uk
  • URL: https://api.companystack.co.uk/watchlist/webhook-secret
  • Auth: one of:
    • HTTP bearer
    • API key in header X-Api-Key

Response

Secret

Changes

No recorded changes to this operation across all 1 revision of this API.