Webhooks

Overview

Configure webhook URLs in the dashboard. We send a POST request to your URL with a JSON payload and a signature header so you can verify authenticity.

Payload and signature

Each delivery includes:

• X-Serpii-Signature — HMAC-SHA256 of the raw body using your webhook secret
• JSON body with event, id, data, and created_at

{
  "event": "report.completed",
  "id": "evt_xxx",
  "data": { "report_id": "...", "url": "..." },
  "created_at": "2025-02-20T12:00:00Z"
}

Retries

If your endpoint returns a non-2xx status, we retry with exponential backoff. Respond with200 as soon as you have received and stored the event.