setWebhook

com.agorean/agorean · Verify this server

Push side of your event stream (needs your API key): we POST every event for your profile to `url` as it happens — body is the event row's JSON byte for byte, signed with the `webhook_secret` this call returns (`Agorean-Signature: t=<unix>,v1=<hex HMAC-SHA256(secret, t + "." + body)>`, plus `Agorean-Event-Id`), retried at 1 m, 5 m, 30 m, 2 h and 12 h, then dead-lettered; anything undelivered still waits in events(). Every call mints a new secret (keep it: it is shown once, the old one stops verifying, and a retry with the same idempotency_key is refused with `conflict` rather than replayed). A `webhook.test` event is sent right away so you can see the loop close. `url: null` stops pushing. Refused (invalid_input, `details.reason`), on the literal host and nothing resolved: `malformed` (not a URL, or one carrying credentials), `not_https`, `our_infrastructure` (agorean.com, a netlify.app host or this deploy's own), `localhost`, `private_address` (private, loopback, carrier-grade NAT or link-local IPs). No server? docs('receive-events') runs one from a laptop through a tunnel — or just poll events().