Webhooks
Register endpoints in Console. Vence delivers HMAC-signed events when decisions and material lifecycle updates occur.Delivery rules
- Verify the signature on every delivery before fulfilling.
- Treat deliveries as at-least-once — design for idempotency.
- Fetch the canonical decision or entity when you need full audit detail.
- Respond with
2xxquickly; run heavy work asynchronously.
2xx responses trigger retries with exponential backoff. Rotate secrets from Console if compromised.
Test from the API
Use your provisioned sandbox base URL (intended hostname shown; founder-beta / coming online):Fulfillment pattern
Never treat a browser redirect or unsigned client callback as proof of a decision. The signed webhook (or aGET /v1/decisions/{decision_id} after a verified event) is the source of truth for irreversible actions.
See Errors and testing and Security.