Skip to main content
This guide creates an endpoint, verifies deliveries in your receiver, and sends a test event.

Create an endpoint

The response includes endpoint.id and signingSecret. Store the signing secret in your secrets manager before closing the response.
Response

Add a receiver

The TypeScript, Python, and Go SDKs ship a Webhook helper that verifies the signature, enforces a 5-minute timestamp tolerance, and returns the parsed event. Hand it the raw request body — re-stringified JSON breaks the signature. Keep receiver logs bounded to delivery status and event type; avoid logging event IDs or payload data unless you redact them first.

Send a test event

The test endpoint performs one synchronous delivery. Use it to confirm reachability and signature verification before broadening your filters.

Go live

Start with exact event names, then widen to patterns like vault.* after your receiver is stable. Use Event types for the generated event list and API reference for endpoint update, replay, and rotation APIs.