firme.envelope.completed

Sent to every active endpoint subscribed to this event. Endpoints without a secret receive no signing header. When a secret is configured, verify X-Custodo-Signature before trusting the body: it is t=<unix seconds>,v1=<hex HMAC-SHA256 of "<t>.<raw body>" keyed with the endpoint’s whsec_… secret>; reject a t more than five minutes away. Answer any 2xx to acknowledge; anything else is retried with backoff.

postWebhookfirme.envelope.completed

Headers

X-Custodo-Eventstring required

The event kind, as in the body.

X-Custodo-Deliverystring required

The delivery id: the same on every retry of it.

X-Custodo-Signaturestring

Present only when the endpoint has a signing secret. HMAC-SHA256 over <t>.<raw body> (see above).

Payload

idstring uuid required

The delivery id.

event'firme.envelope.completed' required

tenant_idstring uuid required

created_atstring date-time required

Response

Acknowledged; nothing is retried.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.