Delivery event (delivered, bounced, opened, clicked, complained, blocked)

postWebhookdeliveryEvent

Headers

x-oveyon-eventstring required

x-oveyon-timestampinteger required

Epoch seconds. Reject if |now − timestamp| > 300 s.

x-oveyon-signaturestring required

sha256= + HMAC-SHA256(secret, timestamp + "." + raw body).

eventstring

idstring

timestampstring date-time

Any 2xx within 10 s counts as delivered; 3xx/4xx/5xx/timeout go to retry (6 attempts).

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.