A signed webhook is an alert channel of kind Webhook: Alerts, Channels, add one. Operator allows one, Network is unlimited, Free has none.
- The URL must start with
https://, have no username or password, and use port 443 or 8443. It must resolve to a public address. - ServerStats shows a signing secret once when you create the channel.
- Each delivery is a
POSTof JSON, signed so you can check it came from us. If your endpoint answers with a 5xx, 408 or 429, ServerStats retries after 30 seconds, 2 minutes, 10 minutes, 30 minutes and 2 hours. Any other non-2xx status fails permanently.
The body, headers and a verification snippet are in the developer docs: webhooks.