01
1. Create the subscriber
- Open /integrations/webhooks → New webhook. Pick a name (e.g. soc-pager-prod) and the events you actually need.
- Paste your endpoint URL (https only — localhost allowed in dev). Generate a per-subscriber secret of 16+ chars and store it in a vault.
- Save. The subscriber row is enabled by default; toggle off if you want to wire receiver code first before traffic lands.
02
2. Verify the receiver
- Compute HMAC-SHA256 of the raw body using your stored secret. Compare to X-DID-Signature-256. Mismatch → drop the event.
- ACK 2xx within 10 seconds. If your handler is slow, enqueue and ACK before processing.
- Run any quick scan to trigger run.completed — confirm the row delivers cleanly on the integrations page.