Webhooks

Webhooks let your platform react to tenant state changes — grants created or revoked, namespaces added, agents registered, API keys rotated.

Webhooks are a v0.5 surface. The catalog below is the target design. Refer to this page after the v0.5 release for endpoint and payload details.

Planned event catalog

• grant.created, grant.revoked
• namespace.created, namespace.deleted
• agent.registered, agent.revoked
• tenant.member.added, tenant.member.removed
• api_key.created, api_key.revoked

Design notes

• HMAC-SHA256 signatures. Verification by subscriber.
• At-least-once delivery. Subscribers must be idempotent on the event id.
• Exponential backoff on delivery failure; drop after 24 hours.
• Delivery log queryable in the console.