Webhooks

Signature Verification

Every webhook will include a signature header for verification:

// Verify webhook signature
const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
  const hash = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');

  return hash === signature;
}

// In your webhook handler
if (!verifyWebhook(req.body, req.headers['x-tnyvoice-signature'], SECRET)) {
  return res.status(401).send('Invalid signature');
}

Retry Logic

• • Automatic retries with exponential backoff
• • Up to 5 retry attempts over 24 hours
• • Email notification on final failure

IP Allowlisting

Webhooks will be sent from these IP ranges:

Dashboard Setup

1. 1. Navigate to Settings → Webhooks
2. 2. Click "Add Endpoint"
3. 3. Enter your endpoint URL
4. 4. Select events to subscribe to
5. 5. Copy your webhook secret for verification
6. 6. Test with a sample payload

Testing Tools

We'll provide tools to test your webhook implementation:

• • Send test events from dashboard
• • View recent webhook deliveries
• • Debug failed deliveries
• • Replay specific events