Webhook (outgoing)
An HTTPS endpoint registered with Truestamp to receive outgoing item event callbacks, managed over the JSON:API and GraphQL surfaces, with optional bearer-token authentication, delivery tracking, private-IP SSRF safeguards, no HMAC payload signing, and a per-plan endpoint limit.
Overview
In Truestamp a webhook is outgoing only: an HTTPS endpoint you register so Truestamp delivers a JSON POST callback whenever a matching item event fires (an item submitted, committed, redacted, unredacted, or deleted). Endpoints are created and managed over the authenticated JSON:API and GraphQL surfaces, every delivery attempt is recorded so you can audit what was sent, and target URLs are screened against private and reserved network addresses so a webhook can never be used to reach internal systems. Deliveries are deliberately not HMAC-signed; the optional bearer token you configure is how a receiver verifies the sender. The number of endpoints you may create is a per-plan limit (see plans and entitlements); the full reference is outgoing webhooks.