Webhooks

domain.verified

A domain passed verification and can send and receive.

postWebhookdomain.verified

Headers

X-Faivelo-Signaturestring required

t=<unix seconds>,v1=<hex hmac>. Two v1 values for 24 hours after you rotate the secret; either one verifying is enough.

Payload

idstring required

Unique per event, stable across retries and resends.

typestring required
created_atstring date-time required
customer_idstring

Partner endpoints only: the customer the event belongs to.

dataobject required

Depends on type. See the example.

Example payload

{
  "id": "evt_01J8ZK3V5QXR7"
}

Response

Received. Any other answer, or none within 10 seconds, is retried.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.