Webhooks

Get Webhook Signing Keys

Returns the Ed25519 public key(s) used to sign webhook deliveries. Verify an incoming webhook's X-Workpath-Signature against the key whose key_id matches the delivery's X-Workpath-Key-ID header.

public_key is the base64-encoded raw 32-byte Ed25519 key. Currently one key is returned; the keys array leaves room for rotating keys without breaking clients. Cacheable for one hour (Cache-Control: max-age=3600).

Note: this endpoint is served at the host root, not under /api/v3, and is unauthenticated.

get/.well-known/webhooks/public-key

Request

Base URL: https://connect.workpath.com
URL: https://connect.workpath.com/.well-known/webhooks/public-key
Auth: none required

Response

Example response

{
  "keys": [
    {
      "key_id": "production",
      "public_key": "n3kQv9C2bJ7rXsE0aYwLpUf4hD1gMzN6tBoR8sViKcA="
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.