Webhooks

Fetch (creating if needed) the HMAC secret used to sign deliveries to you

GET/v1/webhooks/secret

Responses

200Verify x-cofferline-signature (t=<unix>,v1=<hmac>) as HMAC-SHA256 over ${t}.${event_id}.${raw_body}; reject a timestamp older than ~5 minutes

  • secret string (required)

Example

curl -X GET https://api.cofferline.com/v1/webhooks/secret \
  -H "authorization: Bearer $TOKEN"

Dead-lettered deliveries for this account (at-least-once exhausted retries)

GET/v1/webhooks/failures

Most recent first. Pass ?cursor=<last seen id> to page older failures — a busy incident can dead-letter more than one page (#153), and a truncated tail must be walkable.

Parameters

  • cursor in query, integer,null
  • limit in query, integer

Responses

200Most recent first

  • failures object[] (required)
  • next_cursor integer,null (required)

Example

curl -X GET https://api.cofferline.com/v1/webhooks/failures \
  -H "authorization: Bearer $TOKEN"