A link was created

Sent to the acting user's webhooks when a link is created with POST /api/links (data is the full Link) or in the Flyn dashboard (data is {id, slug, destinationUrl, domain}). Links created with POST /api/shorten or POST /api/links/bulk-create do not send it.

Every delivery is an HTTP POST with a JSON body {event, timestamp, data}. X-Flyn-Signature is t=<timestamp>,v1=<hex>, where v1 is HMAC-SHA256 keyed with the full webhook secret (including the whsec_ prefix) over <t>.<raw request body>. To verify: split the header on commas, recompute the HMAC over t, a dot and the raw body bytes (not a re-serialised body), compare in constant time, and reject a t (milliseconds) older than your tolerance. Flyn makes one delivery attempt per event with a 10 s timeout (redirects included). A 2xx answer counts as success; a non-2xx answer counts as a failure, and after 10 counted failures in a row the webhook is set inactive. A URL whose host resolves to a private address or fails DNS resolution is not sent to and counts as a failure. Timeouts, connection errors and redirects to a private host are not counted.