Skip to main content
Simply Tokenized can POST event notifications to your HTTPS endpoint when resources change in your tenant. These are outbound webhooks — we call your server, not the other way around.

​
Setup

  1. Open Administration → API Access → Webhooks in the Asset Manager dashboard
  2. Create a webhook with your HTTPS endpoint URL
  3. Select the events you want to receive
  4. Copy the signing secret

​
Delivery pipeline

  1. Events are written to a webhook outbox table
  2. A message is queued for delivery
  3. The delivery worker POSTs to your URL with signed headers
  4. Each attempt is logged (status code, response body, success/failure)
  5. Failed deliveries are retried automatically

​
Reliability

​
Delivery failures

A delivery counts as a failure when:
  • Your endpoint does not respond within 5 seconds
  • Your endpoint returns a non-2xx HTTP status
  • The connection cannot be established (DNS, TLS, or network error)
Failed deliveries are retried automatically (up to 5 attempts per outbox event). Each failed attempt is logged with the HTTP status code and response body.

​
Retry schedule

Retries use incremental backoff. The first retry waits 60 seconds; each subsequent retry adds 40 seconds: Formula: 60 + (attempt − 1) × 40 seconds. After the 5th failed attempt, the event is not retried further and may move to a dead-letter queue for investigation.

​
Failure notifications

Tenant administrators receive an email on every failed delivery. The email includes:
  • Webhook name and URL
  • Event type that failed to deliver
  • HTTP status (or unreachable if no response)
  • Current consecutive failure count (e.g. 3 of 5)
For failures 1–4, the email warns that the webhook will be automatically disabled after 5 consecutive failures. On the 5th consecutive failure, the email confirms the webhook has been disabled.

​
Auto-disable

After 5 consecutive delivery failures for the same webhook:
  1. The webhook status is set to DISABLED
  2. No further events are delivered to that endpoint
  3. Tenant administrators receive a final email confirming the disable
A successful delivery (2xx response) resets the consecutive failure counter to 0. Re-enable the webhook in Administration → API Access → Webhooks after fixing your endpoint. Verify your server accepts signed POST requests and returns 2xx within the timeout.

​
Request format

Every delivery is an HTTP POST with a JSON body:

​
Headers

​
Next steps

Signature verification

Verify that events are authentic.

Event catalog

All supported events and payload fields.