Get events pushed to your systems instead of polling.
POST /webhooks {"url": "https://...", "events": ["post.published", "post.failed", "competitor.breakout"]}
GET /webhooks # secret shown once at creation
DELETE /webhooks/{id}
Verifying deliveries
Every delivery is signed: X-Krevaya-Signature: sha256=<hex> — an HMAC-SHA256 over the raw request body with your endpoint's secret. Verify before trusting a payload.
Delivery semantics
- Transient failures (network errors, 5xx, 429) retry up to 3 attempts with backoff.
- A 4xx response is treated as final — no retry.
- Post events carry a
"post"object;competitor.breakout(Account Spy) carries the competitor's platform, handle, permalink, and engagement numbers.
Up to 5 endpoints per account. Webhooks are managed from your dashboard session — API keys can't create or delete them.