webhook.test

Signed with the endpoint's secret in ImageStep-Signature; the same event id on every retry. Answer any 2xx to acknowledge it.

postWebhookwebhook.test

Payload

idstring required

The event's id, evt_… — the same on every retry of it, so a receiver can drop a repeat

type'webhook.test' required

What happened; it decides the shape of data

apiVersion'v1' required

The version of this body's shape — the v1 of the /api/v1 paths. Inside it fields are only added (https://imagestep.dev/docs/changelog)

createdAtstring date-time required

When the event was queued — not when this attempt was sent

Received. Anything else, or no answer, is retried

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.