Webhooks (preview)

Event types

Subscribe to the events you need.

• alert.created · alert.resolved
• workflow.completed · workflow.failed
• metric.threshold_crossed
• connector.sync_failed

Verifying signatures

Each delivery includes an X-MediPosIQ-Signature header: an HMAC-SHA256 of the raw body using your endpoint secret.

import crypto from "node:crypto";

export function verify(rawBody, header, secret) {
  const expected = crypto.createHmac("sha256", secret).update(rawBody).digest("hex");
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(header));
}

Retries

Failed deliveries (non-2xx) are retried with exponential backoff for up to 24 hours.