Skip to main content
bthebigclass
All help topics

For developers

Webhooks (roadmap)

Outbound webhooks are on the near-term roadmap. The contract below is what we'll ship — file an issue if anything's wrong before we lock it.

We'll sign every webhook with an HMAC-SHA256 over the raw body, sent in the Tbc-Signature header. Verify on receipt by computing the same HMAC with your webhook secret and constant-time comparing.

Retries: 5 attempts, exponential backoff (1m, 5m, 30m, 6h, 24h). After the last failure the event goes to a dead-letter queue you can replay from the dashboard.

Event shape will match the bigger ones in the catalogue (Stripe-style): a top-level type + an embedded data object that mirrors the GET response of the entity.