Configure an Endpoint

Add an HTTPS destination, choose subscription event names, and save the returned whsec_ signing secret securely. You can disable, update, test, rotate, or delete the endpoint and inspect recent delivery attempts.

Verification

Verify X-OT-Signature as a hexadecimal HMAC-SHA256 of the exact raw request body using the endpoint secret. X-OT-Timestamp contains Unix seconds. See the Webhook Delivery API reference for the payload and verification code.

Retries

Outbound jobs use up to five attempts with exponential backoff from 30 seconds, and individual HTTP requests time out after 15 seconds. Failed deliveries can be manually re-queued from the dashboard/API.