Webhooks

Paste an active key to manage webhook endpoints for your tenant. The key stays in this tab's sessionStorage.

Don't have a key yet? Request a sandbox key

Webhook endpoints

Stripe-style HMAC-SHA256 signatures · 5-attempt retry with exponential backoff · max 20 active per tenant.

Endpoints

Loading…

Verifying signatures

Each delivery includes:

X-Advanta-Event-Id:   evt_…
X-Advanta-Event-Type: api_key.rotated
X-Advanta-Signature:  t=1778412600,v1=<hmac-sha256(t.body, secret) hex>

Verify with our SDKs (constant-time compare, 5-min timestamp tolerance):

// Node
import { Webhooks } from '@advanta/sdk-node';
const event = Webhooks.verify(rawBody, req.headers['x-advanta-signature'], secret);

# Python
from advanta import verify_webhook
event = verify_webhook(request.data, request.headers.get('X-Advanta-Signature'), secret)