Burrowbox Dev Webhooks

generated: '2026-11-03'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://burrowbox.dev/docs/automations
sources:
- https://burrowbox.dev/docs/automations
- https://burrowbox.dev/docs/events
description: Burrowbox can POST a signed JSON event to your server whenever a machine changes state or a job finishes.
events:
- event: machine.created
  description: A machine was created and booted.
- event: machine.started
  description: A stopped machine was turned on.
- event: machine.stopped
  description: 'A machine was turned off (state kept). detail.reason says why: requested, expired, balance-empty, platform (stopped by the host),
    or after schedule … / after webhook … (stopAfter).'
- event: machine.error
  description: A machine failed to boot or crashed.
- event: machine.expired
  description: A machine reached its expiresAt (followed by stopped or destroyed).
- event: machine.destroyed
  description: A machine was deleted.
- event: machine.claimed
  description: A machine was taken from a warm pool.
- event: run.succeeded
  description: A scheduled job or webhook run finished successfully.
- event: run.failed
  description: A scheduled job or webhook run failed.
delivery:
  signature: Burrowbox-Signature header containing t=<unix seconds>,v1=<hex HMAC-SHA256 of "t.body" with the secret>
  content_type: application/json
note: Each endpoint has a signing secret (whsec_…) shown once when you create it. The signature is verified using HMAC‑SHA256 over the raw request
  body with the secret and the timestamp must be within the default 300‑second tolerance.
docs: https://burrowbox.dev/docs/automations