Skip to main content
Register an HTTPS endpoint with explicit event types from the current Connect API allowlist. Darwin returns a one-time signing secret when the webhook is created. For each delivery:
  1. Read the raw request bytes before JSON parsing.
  2. Verify the signature and timestamp.
  3. Reject stale or invalid deliveries.
  4. Deduplicate by delivery ID.
  5. Commit your state change and delivery ID atomically.
  6. Return success only after durable acceptance.
Delivery is at least once. Retries can arrive after a newer event, so reconcile by resource state and timestamps rather than arrival order alone. Darwin records bounded response metadata and supports explicit retry of failed deliveries. Poll an application-scoped resource when its lifecycle event does not appear in the current allowlist; do not invent or depend on undocumented events. Never expose a webhook signing secret in browser code, mobile bundles, logs, or model-visible prompts.