Webhooks & events

Register an endpoint and Jetwild POSTs a signed JSON event to it when something happens — so you can react instead of poll.

Register a webhook

Manage webhooks in Settings → Developers (an OWNER or DIRECTOR of the workspace). Each webhook gets a signing secret prefixed whsec_, shown once.

Events

The event catalog Jetwild will emit. Coming soon

Payload

Every delivery is a JSON body with the event name and its data, plus an x-jetwild-event header naming the event.

{
"event": "ping",
"data": { "test": true, "timestamp": "2026-07-02T10:00:00.000Z" }
}

Verify signatures

Every request carries an x-jetwild-signature header of the form t={timestamp},v1={signature}, where signature is HMAC-SHA256(secret, "{timestamp}.{rawBody}") as hex. Recompute it over the raw request body and compare before trusting the payload.

import { createHmac, timingSafeEqual } from 'node:crypto'
 
function verify(rawBody, header, secret) {
const parts = Object.fromEntries(header.split(',').map((kv) => kv.split('=')))
const expected = createHmac('sha256', secret)
  .update(`${parts.t}.${rawBody}`)
  .digest('hex')
const a = Buffer.from(expected)
const b = Buffer.from(parts.v1 ?? '')
return a.length === b.length && timingSafeEqual(a, b)
}

Retries

Failed deliveries retry up to 5 times with exponential backoff (starting at 2s). After 10 consecutive failures a webhook is automatically disabled — re-enable it in Settings once your endpoint is healthy.