Skip to main content

Outbound delivery of one event to a customer endpoint.

Webhook

At-least-once; the consumer de-duplicates on id. Order is not guaranteed; seq orders events of one account. Signature header: CoRelayer-Webhook-Signature: v1=<hex(HMAC-SHA256(secret, id + "." + timestampMs + "." + rawBody))> where id = the value of the CoRelayer-Webhook-Id header = the event id (two comma-separated v1= values during a secret rotation). Reject when |now - CoRelayer-Webhook-Timestamp| > 300 000 ms. Any 2xx within 5 000 ms is success; the body is ignored. Retries at 10 000, 60 000, 300 000, 1 800 000, 3 600 000, 7 200 000, 14 400 000, 28 800 000 and 28 800 000 ms after the previous attempt (10 attempts, about 23 h). The endpoint is disabled after 604 800 000 ms of continuous failure and a webhook.disabled notice is raised.

Request​

Responses​

Delivered.