Cerby Webhooks
Cerby's webhook notification service delivers real-time signed HTTPS events for account, credential, MFA, and automation lifecycle changes. Deliveries carry a fixed JSON envelope (envelope_version, event_id, event_type, occurred_at, workspace_id, data), an Ed25519 or HMAC-SHA256 signature over timestamp.body, an Idempotency-Key header, at-least-once semantics with documented dedup keys, and a six-attempt exponential retry policy with a 24-hour hard deadline.