Check the delivery status of webhooks for a task. Returns a list of delivery attempts with status, response code, and timestamps.

Useful for debugging "I didn't receive my webhook" scenarios.

Webhook Verification

Every webhook includes two headers for security:

• X-TDA-Delivery-ID — Unique delivery ID. Use this to deduplicate retries.
• X-TDA-Signature — HMAC-SHA256 signature of the raw request body.

To verify a webhook is authentic, compute the HMAC of the raw body using your webhook signing secret and compare:

import hmac, hashlib

def verify_webhook(raw_body: bytes, signature_header: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(
        secret.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature_header)

# In your webhook handler:
is_valid = verify_webhook(
    raw_body=request.body(),
    signature_header=request.headers["X-TDA-Signature"],
    secret="your-webhook-signing-secret",
)

Retry Policy

Failed deliveries are retried automatically: 3 immediate retries, then background retries at 1m, 5m, 15m, 30m, 1h, 2h, 4h (8 total attempts). 4xx responses are treated as permanent failures and are not retried.

Delivery statuses: pending, delivered, failed (will retry), dead (exhausted).