Received mail

A message was received

A message was received on an inbound stream: the reference, or the reference and the message itself, as the webhook asks.

postWebhookinbound

Headers

Sendora-Signaturestring required

t= the Unix time of sending, then v1= an HMAC-SHA256 over <t>.<body> for each live secret of the webhook, the newest first. Verify one before you trust the body.

Sendora-Eventstring required

The event, the same as event in the body.

Sendora-Delivery-Idstring required

The delivery, the same as id in the body and on every retry of it.

User-Agentstring required

Sendora-Webhooks/1.

Payload

OR

Example payload

{
  "id": "6e8a0c2e-4a6c-4e8a-8c0e-2a4c6e8a0c2e",
  "attempt": 1,
  "event": "inbound",
  "inboundMessageId": "1b3d5f7a-9c1e-4b3d-8f7a-9c1e3b5d7f9a",
  "serverId": "0f8a1b2c-3d4e-4f5a-8b6c-7d8e9f0a1b2c",
  "streamId": "8a0c2e4a-6c8e-4a0c-8e4a-6c8e0a2c4e6a",
  "receivedAt": "2026-09-15T12:00:00.000Z",
  "envelopeRecipient": "support@example.se",
  "mailboxHash": null,
  "sizeBytes": 18432,
  "attachmentCount": 1,
  "hasText": true,
  "hasHtml": true,
  "authentication": {
    "spf": "pass",
    "spfHelo": "pass",
    "dkim": "pass",
    "dmarc": "pass",
    "dmarcPolicy": null,
    "arc": "none",
    "checkedAt": "2026-09-15T12:00:00.000Z"
  },
  "parseIssue": null
}

Response

Acknowledges the delivery. Any other answer, or none within 10 seconds, is retried.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.