WEBHOOKS
Webhooks API Reference
Reference for webhook endpoint management, event delivery, signatures and retry behavior.
Real-time
Event driven
As events happen
Reliable delivery
Automatic retries
Exponential backoff
Signatures
HMAC SHA-256
Verify every payload
Endpoint limit
100 endpoints
Per tenant
Payload
JSON
Versioned envelope
Endpoint management
| Method | Endpoint | Purpose |
|---|---|---|
| POST | /webhooks | Create endpoint |
| GET | /webhooks | List endpoints |
| GET | /webhooks/{id} | Get endpoint |
| PATCH | /webhooks/{id} | Update endpoint |
| DELETE | /webhooks/{id} | Delete endpoint |
| POST | /webhooks/{id}/test | Trigger sandbox test |
Delivery attempts
| Method | Endpoint |
|---|---|
| GET | /webhooks/{id}/attempts |
| GET | /webhooks/{id}/attempts/{attempt_id} |
| POST | /webhooks/{id}/attempts/{attempt_id}/redeliver |
Event envelope
Headers
| Header | Purpose |
|---|---|
| Mediloop-Signature | HMAC signature + timestamp |
| Mediloop-Event-Id | Unique event ID |
| Content-Type | application/json |
Event types
Response codes
| HTTP | Meaning |
|---|---|
| 200/201 | Success |
| 400 | Invalid request |
| 401/403 | Auth/permission failure |
| 404 | Not found |
| 409 | Conflict |
| 429 | Rate limit |
Limits
Endpoint limits, event retention and delivery-attempt retention vary by plan and production contract.