The carrier reports movement. Every change, not just the notable ones — a machine reading a feed wants the whole route.
Signed with HMAC-SHA256 over the exact request bytes, in the X-Signature header. Respond 2xx; anything else is retried with backoff.
postWebhooktracking_status
Headers
X-Signaturestring required
HMAC-SHA256 of the raw body, keyed with your webhook secret, hex encoded.
Response
Acknowledged.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.