Webhooks API
Register outgoing webhooks, inspect deliveries, and verify signatures.
Certyn supports outgoing webhooks: event notifications that Certyn POSTs to your endpoint.
List event types
GET
/api/webhooks/event-typesBearer TokenList webhooks
GET
/api/webhooksBearer TokenQuery:
projectId(optional)includeGlobal(optional, default true)page,pageSize
Register webhook
POST
/api/webhooksBearer TokenDelete webhook
DELETE
/api/webhooks/{id}Bearer TokenRotate secret
POST
/api/webhooks/{id}/secret/rotateBearer TokenTest webhook
POST
/api/webhooks/{id}/testBearer TokenDeliveries
GET
/api/webhooks/{id}/deliveriesBearer TokenGET
/api/webhooks/{id}/deliveries/{deliveryId}Bearer TokenPOST
/api/webhooks/{id}/deliveries/{deliveryId}/retryBearer TokenSignature verification
Webhook deliveries include:
X-Certyn-Timestamp(ISO-8601)X-Certyn-Signaturein the formsha256=<hex>
The signature is an HMAC-SHA256 over:
<timestamp>.<raw_json_body>
Use your webhook secret (webhook-level secret, or tenant signing secret if configured) as the HMAC key.