# kawaa-com Webhooks API

**Canonical:** https://apis.io/apis/kawaa-com/kawaa-com-webhooks-api/  
**Provider:** kawaa-com — https://apis.io/providers/kawaa-com/  
**Base URL:** https://api.kawaa.com  
**Documentation:** https://kawaa.com/docs/api/

kawaa-com Webhooks API is one of 11 APIs that [kawaa-com](https://apis.io/providers/kawaa-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Webhook. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

Be told when work finishes instead of polling. **Verifying a delivery.** Every signed delivery carries `X-Kawaa-Signature-V2: t=<unix seconds>,v1=<hex>`. `t` is when that request was sent and `v1` is the hex HMAC-SHA256 of `<t>.<raw body>` (the `t` string, a period, then the raw request body bytes), keyed with the webhook's secret: a registered endpoint's `secret`, or a job's `webhook_secret`. Recompute it over the raw body, compare it with a constant-time comparison, and refuse the request when `t` is more than 300 seconds from your clock in either direction (the recommended tolerance): a captured delivery then cannot be replayed later. A header may carry several `v1` entries (any match verifies); ignore entries with other names. Each attempt is signed when it is sent, so an automatic retry, a manual retry (`POST /v1/webhooks/{id}/logs/{logId}/retry`) and a test delivery each carry a fresh `t`. Check the window against `t` only: the body's `timestamp` keeps the time of the original delivery, and `X-Kawaa-Timestamp` is informational and not signed. `X-Kawaa-Signature: sha256=<hex HMAC-SHA256 of the raw body>` is the legacy signature, still sent unchanged for existing receivers. It signs no time, so a captured delivery verifies against it forever; verify `X-Kawaa-Signature-V2` instead. A per-job callback sent without a `webhook_secret` carries neither.

## Operations (10)

| Method | Path | Summary |
|---|---|---|
| GET | `/v1/webhooks` | List webhook endpoints |
| POST | `/v1/webhooks` | Register a webhook endpoint |
| GET | `/v1/webhooks/events` | The events you can subscribe to |
| GET | `/v1/webhooks/{id}` | One webhook endpoint |
| PUT | `/v1/webhooks/{id}` | Change a webhook endpoint |
| DELETE | `/v1/webhooks/{id}` | Delete a webhook endpoint |
| POST | `/v1/webhooks/{id}/secret` | Rotate a webhook signing secret |
| GET | `/v1/webhooks/{id}/logs` | An endpoint's delivery log |
| POST | `/v1/webhooks/{id}/logs/{logId}/retry` | Re-send a logged delivery |
| POST | `/v1/webhooks/{id}/test` | Send a test delivery |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/kawaa-com/openapi/kawaa-com-webhooks-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-deliverability-check-schema.json
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-verification-result-schema.json
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-job-schema.json
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-account-schema.json
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-sub-account-schema.json
- **JSONSchema** — https://artifacts.apis.io/kawaa-com/json-schema/kawaa-com-batch-accepted-schema.json

## Other kawaa-com APIs (10)

- [kawaa-com Account API](https://apis.io/apis/kawaa-com/kawaa-com-account-api/)
- [kawaa-com Activity API](https://apis.io/apis/kawaa-com/kawaa-com-activity-api/)
- [kawaa-com API keys API](https://apis.io/apis/kawaa-com/kawaa-com-api-keys-api/)
- [kawaa-com Catalogue API](https://apis.io/apis/kawaa-com/kawaa-com-catalogue-api/)
- [kawaa-com Deliverability API](https://apis.io/apis/kawaa-com/kawaa-com-deliverability-api/)
- [kawaa-com Exports API](https://apis.io/apis/kawaa-com/kawaa-com-exports-api/)
- [kawaa-com Health API](https://apis.io/apis/kawaa-com/kawaa-com-health-api/)
- [kawaa-com Jobs API](https://apis.io/apis/kawaa-com/kawaa-com-jobs-api/)
- [kawaa-com Search API](https://apis.io/apis/kawaa-com/kawaa-com-search-api/)
- [kawaa-com Verification API](https://apis.io/apis/kawaa-com/kawaa-com-verification-api/)

## Tags

Webhook

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/kawaa-com/kawaa-com-webhooks-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/kawaa-com/.