Skip to main content

​
TechWolf Webhooks

Webhooks let you receive real-time change notifications from TechWolf. When something changes in your tenant, TechWolf sends a POST request to your endpoint over HTTPS. We use thin events: each payload only signals that something changed and provides identifiers (e.g. tenant, resource external_id), not the full details of the changed resource. Querying the SkillEngine API is required to get the authoritative state of the changed resource. This section describes: Consumers only need to support the event types they care about. The healthcheck event type is mandatory for every consumer so TechWolf can verify your endpoint is live and functioning.

​
Consumer responsibilities

  • Expose an HTTPS endpoint and allowlist our source IPs.
  • Verify signatures and validate timestamp freshness; return 2XX on successful receipt of a valid message, 401 on verification failure, 400 on invalid request.
  • Handle at-least-once delivery: deduplicate by event id and implement idempotent processing.
  • Fetch full state from the SkillEngine API; the payload only contains identifiers and metadata, not the resource itself.
  • Recommended: run a periodic reconciliation in addition to webhooks to correct any drift.

Event types

Events with versioned payloads.

Protocol & delivery

HTTPS POST, CloudEvents 1.0, at-least-once delivery, 15s timeout.

Security

Ed25519 signature verification and optional OAuth2 for your endpoint.