Webhooks

HMAC-signed, idempotent event delivery into your own systems.

Webhooks bring PushPig events into your own systems: on every relevant event PushPig calls a URL you configure — signed, idempotent and with automatic retries.

Available events

push.sent — push delivered to at least one recipient
push.failed — no recipient reached
channel.subscribed / channel.unsubscribed
bulk.completed — bulk job finished

Signed & tamper-proof

Every request carries an X-PushPig-Signature header (HMAC-SHA256 over "<timestamp>.<body>" with your webhook secret). That's how you verify authenticity; the fresh timestamp protects against replay attacks.

X-PushPig-Event: push.sent
X-PushPig-Delivery: 8a4f9b21c0d3...
X-PushPig-Signature: sha256=<HMAC-SHA256("<ts>.<body>", secret)>

Reliable delivery

Failed deliveries are retried up to 5× with exponential backoff. The X-PushPig-Delivery ID stays identical across all attempts so you can rule out double processing (idempotency).

Full payload examples and verification code are in the API reference.

Help & API · Pricing · Contact · Imprint · Privacy