Overview
A webhook is an HTTPS POST that Clawise sends to a URL of yours when something happens — a message arrives, an OTP comes in, a payment fails. The body is a JSON envelope, signed with HMAC-SHA256.
How it works
Register an endpoint
In the dashboard, supply an HTTPS URL and pick the event types you want delivered. Clawise issues a signing secret — copy it once and store it like an API key.
Receive signed POSTs
When a subscribed event fires, Clawise POSTs the JSON envelope to your URL with Clawise-Signature-V1 and Clawise-Timestamp headers.
Verify and respond
HMAC-SHA256 over {timestamp}.{raw_body} with your signing secret. Reject if it doesn't match or the timestamp is too old. Return 2xx quickly.
Retries
Non-2xx responses, timeouts, or connection failures trigger automatic retries with backoff.