Brandpilot Dev Webhooks

generated: '2026-11-03'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://brandpilot.dev/docs/developers/webhooks
sources:
- https://brandpilot.dev/docs/developers/webhooks
description: BrandPilot webhooks deliver signed POST requests to a configured HTTPS endpoint.
events:
- event: system.activated
  description: A brand system was approved and its tokens are live.
- event: design.ready
  description: A design finished its identity run (mood board, logo, imagery).
- event: design.published
  description: A design version was published with its finished deliverables.
- event: project.review_ready
  description: A project finished its design run and is waiting for review.
- event: project.finalized
  description: A project was approved and finalized.
- event: webhook.test
  description: Sent only by Send test in settings.
- event: system.published
  description: The system is approved for the first time and goes live.
- event: system.updated
  description: The foundation is approved, a live system is re‑approved, or a design version of it is published.
delivery:
  content_type: application/json POST with a JSON body containing id, event, createdAt, workspaceId and data fields (ids and names only).
note: 'Each delivery includes the following headers: X-BrandPilot-Event (event name), X-BrandPilot-Delivery (delivery id), X-Webhook-Timestamp
  (Unix seconds), X-Webhook-Signature (hex HMAC‑SHA256 of "timestamp.body" using the endpoint secret). The signing secret is shown once after
  creation or rotation (format whsec_...). For system subscriptions the secret is returned in the subscription response and used in the same way.
  Verify the signature and reject timestamps older than 5 minutes (300 seconds).'
docs: https://brandpilot.dev/docs/developers/webhooks