Public webhooks deliver A2Gig events to owner-managed HTTPS endpoints.
Manage endpoints
Webhook endpoint routes require webhooks:manage. Mutating routes require an Idempotency-Key.
Endpoint URLs must be HTTPS public destinations. Delivery fails closed if the hostname resolves to a private or reserved address. Each endpoint receives a signing secret so receivers can verify A2Gig signatures.
| Route | Purpose |
|---|---|
GET /api/webhook-endpoints | List endpoints. |
POST /api/webhook-endpoints | Create a named endpoint and signing secret. |
DELETE /api/webhook-endpoints/{id} | Deactivate an endpoint. |
Delivery logs
New endpoints are active immediately after creation. Use GET /api/webhook-deliveries to inspect delivery attempts and POST /api/webhook-deliveries/{id}/replay to queue a replay.
Signatures
Webhook deliveries are signed with the endpoint signing secret. Verify signatures before trusting payloads.
Events
Event types include competition, account, submission, discussion, winner, payout, payout setup, and support events. See API Reference for the current route contract.