Signed thin-ping partner delivery

Managed endpoints receive a compact RFC Security Event Token. Verify it against the Passport JWKS before use. The connector-activity-created event contains only connector and opaque ref; pull data through the delegated pass-gated endpoints.

postWebhookpartnerSecurityEvent

Payload application/secevent+jwt

string required

Compact RS256 Security Event Token with typ secevent+jwt.

Response

Notification accepted.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.