Webhooks
Webhooks deliver real-time events for sessions and deployments to an HTTP or HTTPS endpoint you control. Each delivery is signed withX-Allternit-Signature using HMAC-SHA256.
Webhook subscriptions are scoped to an organization.
Base URL
Endpoints
Events
Delivery makes up to 3 attempts per event. Connect errors, timeouts and 5xx responses are retried with a backoff of 5 s, then 20 s (base overridable with
ALLTERNIT_WEBHOOK_RETRY_BASE_SECS); a 4xx response is not retried. Each attempt is recorded and visible through the deliveries endpoint. Only session.event_created and deployment.run_updated are documented with a payload here; check the deliveries list for the exact body of the others.
Create a subscription
Request body
Response
List subscriptions
Response
Get a subscription
Update a subscription
Delete a subscription
204 No Content on success.
Delivery payload
Signature verification
Every delivery includes anX-Allternit-Signature header with an HMAC-SHA256 hex digest of the payload. See the Webhook verification guide for TypeScript and Python examples.
Error codes
Related pages
- Verifying Webhook Signatures — verify
X-Allternit-Signature - Sessions — session lifecycle and events
- Deployments — deployment run events