SATIK DEVELOPER DOCS · V1 BETA
Signed updates. Straight to your system.
Receive batch completion and quota notices on a public HTTPS endpoint.
Connect an endpoint
In Webhooks, add a public HTTPS URL. Save the signing secret, shown once. Satik encrypts it at rest. Redirects, credentials in URLs, IP literals, and private-network destinations are blocked.
Verify the signature
Validate the signature against the exact raw request body before processing an event.
| Check | How to verify |
|---|---|
Signature headerSatik-Signature | Parse t=<unix>,v1=<hex> into timestamp and signature. |
Expected signatureHMAC-SHA256 | Use the endpoint secret to sign timestamp + "." + the exact raw request body. |
| Signature comparison | Compare signatures in constant time. |
| Timestamp tolerance | Reject timestamps outside a five-minute window. |
| Duplicate event | Deduplicate by event ID before applying the event again. |
Retry behavior
Return 2xx after durable acceptance. Review attempts and replay failed events from the dashboard.
| Retry | Delay before this retry |
|---|---|
| First retry | 1 minute. |
| Second retry | 5 minutes. |
| Third retry | 30 minutes. |
| Fourth retry | 2 hours. |
| Fifth retry | 12 hours. |