Soveren · AsyncAPI Specification

Soveren Webhooks

Version

View Spec View on GitHub CompanyInfra DevtoolsData SecurityDSPMDDRData PrivacyKubernetesComplianceSecurityAsyncAPIEvents

AsyncAPI Specification

Raw ↑
generated: '2026-07-21'
method: searched
source: https://docs.soveren.io/en/stable/integration/webhook/
transport: outbound-webhook
delivery:
  method: POST
  content_type: application/json
  user_agent: SoverenWebhook/1.0
  signing:
    algorithm: HMAC-SHA-256
    header: x-soveren-signature
    format: sha256=<hash>
    optional: true
    note: Signature present only when a signing token is configured on the webhook.
  retry:
    failure_after: 15m
    note: Webhook status changes to failed if Soveren cannot deliver successfully for longer than 15 minutes.
  test: Integrations UI provides a "Send test event" button that returns 200 OK on success.
configuration: https://app.soveren.io/integrations/
categories:
  - id: infrastructure_updates
    description: Events related to changes in your infrastructure such as new data types or services.
  - id: data_at_risk
    description: Events indicating potential risks to your data such as policy violations or anomalies.
  - id: misconfiguration
    description: Events indicating misconfigurations such as unencrypted storage or public access.
  - id: other
    description: Other events such as discovery completion or update notifications.
event_types:
  data_at_risk:
    - 3rd_party_policy_violation
    - anomaly_detected
    - excessive_db_access
    - policy_violation
    - policy_violation_dar
  infrastructure_updates:
    - custom_asset_rule_conflict
    - email_clustered
    - new_data_type
    - new_external_receiver
    - new_internal_receiver
    - new_internal_sender
    - new_potential_data_storage
    - new_data_storage
    - started_storing_data
    - started_storing_datatype
    - updated_enduser_receiver
    - updated_external_receiver
    - updated_internal_receiver
    - updated_internal_sender
    - updated_robot_receiver
  misconfiguration:
    - policy_public_s3_bucket
    - policy_unencrypted_network
    - policy_unencrypted_rds
    - policy_unencrypted_s3_bucket
  other:
    - dar_release_update
    - dar_release_update_critical
    - dim_release_update
    - dim_release_update_critical
    - discovery_complete

Work with this as data

Every AsyncAPI spec here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for asyncapi

4 MCP tools reach this
  • find_asyncapisBrowse and filter every AsyncAPI spec in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This AsyncAPI spec
curl "https://apis.io/api/v1/asyncapis/soveren-webhooks"
All asyncapi
curl "https://apis.io/api/v1/asyncapis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.