Developers
Handle signed completion events
Verify signatures and deduplicate event IDs.
Receiving a completion
Configure an HTTPS endpoint and store its signing secret on your server. Verify the signature against the exact raw request body, event ID and timestamp before reading the payload.
A retry can deliver the same event again. Deduplicate by event ID after verification. Secret rotation and disabled endpoints are managed from the workspace webhook screen.
If delivery fails
The customer job and its results remain available through the API. Webhook delivery failures do not rerun the verification or create a new credit charge.