Webhooks

Webhooks deliver real-time events for sessions and deployments to an HTTP or HTTPS endpoint you control. Each delivery is signed with X-Allternit-Signature using HMAC-SHA256. Webhook subscriptions are scoped to an organization.

Base URL

For local development:

Endpoints

Events

Delivery makes up to 3 attempts per event. Connect errors, timeouts and 5xx responses are retried with a backoff of 5 s, then 20 s (base overridable with ALLTERNIT_WEBHOOK_RETRY_BASE_SECS); a 4xx response is not retried. Each attempt is recorded and visible through the deliveries endpoint. Only session.event_created and deployment.run_updated are documented with a payload here; check the deliveries list for the exact body of the others.

Create a subscription

Request body

Response

List subscriptions

Response

Get a subscription

Update a subscription

Delete a subscription

Returns 204 No Content on success.

Delivery payload

Signature verification

Every delivery includes an X-Allternit-Signature header with an HMAC-SHA256 hex digest of the payload. See the Webhook verification guide for TypeScript and Python examples.

Error codes