Outbound webhooks

Register destinations, scope events, rotate secrets. Signed with HMAC-SHA256 and a 5-minute replay window. PRD §25.5.

Register destination · HTTPS only · 35 events availablepreview · seed data
https://acme.com/cycle/webhooks● active
whk_01HX5FW001 · last delivery 2026-05-11 09:42:11 · 99.8% success
card.createdcard.frozentxn.clearedexpense.report.submitted
https://acme-finance.netsuite.com/inbound● active
whk_01HX5FW002 · last delivery 2026-05-11 07:00:02 · 100% success
statement.generatedpayment.settled
https://acme-soc.example.com/cycle/audit● disabled
whk_01HX5FW003 · last delivery 2026-05-08 22:14:55 · 87.2% success
audit.exportedpolicy.changed