Webhooks

outgoing event callbacks · ← settings

What these are

The platform sends a signed POST to each endpoint when a run reaches a terminal phase (run.succeeded, run.failed, run.cancelled). Every request carries an X-Simolyot-Signature: sha256=… header — an HMAC-SHA256 of {timestamp}.{rawBody} keyed by the endpoint secret — plus X-Simolyot-Timestamp, X-Simolyot-Event, and X-Simolyot-Delivery. Verify with a constant-time compare and reject a timestamp skewed more than ~5 minutes. The SDKs ship a verify helper.

Managing webhooks is restricted to owners/admins. You can view existing endpoints below.

Endpoints