DocumentationWebhooks

SATIK DEVELOPER DOCS · V1 BETA

Signed updates. Straight to your system.

Receive batch completion and quota notices on a public HTTPS endpoint.

Connect an endpoint

In Webhooks, add a public HTTPS URL. Save the signing secret, shown once. Satik encrypts it at rest. Redirects, credentials in URLs, IP literals, and private-network destinations are blocked.

Verify the signature

Validate the signature against the exact raw request body before processing an event.

Webhook signature checks
CheckHow to verify
Signature headerSatik-SignatureParse t=<unix>,v1=<hex> into timestamp and signature.
Expected signatureHMAC-SHA256Use the endpoint secret to sign timestamp + "." + the exact raw request body.
Signature comparisonCompare signatures in constant time.
Timestamp toleranceReject timestamps outside a five-minute window.
Duplicate eventDeduplicate by event ID before applying the event again.

Retry behavior

Return 2xx after durable acceptance. Review attempts and replay failed events from the dashboard.

Failed webhook retry schedule
RetryDelay before this retry
First retry1 minute.
Second retry5 minutes.
Third retry30 minutes.
Fourth retry2 hours.
Fifth retry12 hours.