Docs · API
Webhooks
Delivery guarantees
At-least-once delivery, ordered per resource. If the receiving endpoint returns a non-2xx status, the event is retried with exponential backoff over the next 24 hours, then delivered to the dead-letter queue.
Signing
Every webhook body is signed with HMAC-SHA256. The signature is delivered in the X-Sabee-Signature header. Verify by computing the HMAC over the raw body with your webhook secret and comparing constant-time to the header value.
Event catalogue
module.activated, module.deactivated, reservation.imported, parity.break.detected, review.received, invoice.issued, invoice.paid, webhook.dead_lettered. Full payload schemas are documented in the workspace.