Signed thin-ping partner delivery
Managed endpoints receive a compact RFC Security Event Token. Verify it against the Passport JWKS before use. The connector-activity-created event contains only connector and opaque ref; pull data through the delegated pass-gated endpoints.
postWebhookpartnerSecurityEvent
Payload application/secevent+jwt
string required
Compact RS256 Security Event Token with typ secevent+jwt.
Response
Notification accepted.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.