Registry API
Webhooks
Register signed callbacks, test them, and redeliver failed deliveries.
Each delivery is an HMAC-SHA256-signed JSON POST carrying event metadata only. Failed attempts are retried up to three times with exponential backoff, every attempt is logged, and any delivery can be redelivered. Admins only.
Operations
| Request | What it does |
|---|---|
| POST /v1/webhooks | Register a webhook endpoint |
| GET /v1/webhooks | List webhook endpoints |
| DELETE /v1/webhooks/{id} | Delete a webhook endpoint |
| POST /v1/webhooks/{id}/ping | Send a test delivery |
| GET /v1/webhooks/{id}/deliveries | List an endpoint’s deliveries |
| POST /v1/webhooks/deliveries/{deliveryId}/redeliver | Redeliver one delivery |
Operations are the routes the server registers; this site checks its list against the route definitions. Operations marked “in spec” are also described in the committed OpenAPI file (apps/api/openapi.json), which does not yet cover every route. Only the public catalog and the health check work without a token.