Webhooks
Receive small canonical-resource change notifications.
- Targets must be public HTTPS endpoints.
- Deliveries use HMAC over timestamp plus raw body.
- Delivery is at least once; receivers must deduplicate event IDs.
- Timeouts, 429 and 5xx retry with bounded exponential backoff.
- Repeated permanent failure can disable a subscription.
- Self-service subscriptions are not generally available.