Notyfi Webhooks

generated: '2026-07-20'
method: searched
source: openapi/notyfi-openapi-original.json
spec_type: Webhooks
notes: >-
  Notyfi publishes an outgoing-webhook surface (no AsyncAPI document). Endpoints are
  managed via the REST API (create/list/update/delete, rotate-secret, test). Each
  endpoint is subscribed to one or more canonical tracker-event types and can be scoped
  to specific tracker_ids (empty = all trackers owned by the account). Payloads are
  HMAC-signed; the signing_secret is returned exactly once at creation and can be rotated.
transport: https
delivery: outgoing HTTP POST to a subscriber-provided URL
signature:
  scheme: HMAC
  header: 'No-* signature header (verify with the endpoint signing_secret)'
  secret_lifecycle: returned once on creation; rotatable via /webhooks/{id}/rotate-secret
events:
  - type: tracker.event.created
    description: A new canonical tracker event was created.
  - type: tracker.event.updated
    description: An existing canonical tracker event was updated/revised.
management_operations:
  - POST   /api/v1/webhooks                          # create_webhook_endpoint
  - GET    /api/v1/webhooks                          # list_webhook_endpoints
  - PATCH  /api/v1/webhooks/{webhook_id}             # update_webhook_endpoint
  - DELETE /api/v1/webhooks/{webhook_id}             # delete_webhook_endpoint
  - POST   /api/v1/webhooks/{webhook_id}/rotate-secret
  - POST   /api/v1/webhooks/{webhook_id}/test        # test_webhook_endpoint