Skip to main content
Kallima sends a signed POST request to your HTTPS endpoint whenever a subscribed event fires. This lets your pipeline react to job completion without polling.

Register an endpoint

The secret field is only returned on creation. Store it in your secrets manager.

Verify incoming requests

Use WebhookVerifier to validate the X-Kallima-Signature header before processing events:
Signatures are HMAC-SHA256 over timestamp.body. Requests older than 5 minutes are rejected automatically to prevent replay attacks.

Event types

Test an endpoint

Fire a webhook.test event immediately to verify your URL is reachable:

Inspect delivery history

Retry a failed delivery:

Rotate the signing secret

The old secret is invalidated immediately. Update your server before rotating.

Disable or delete