Outbound Webhooks

Register callback URLs to receive signed POST events when versions are deployed, A/B tests stop, or evals complete.

Registering a webhook

Go to Settings → Integrations and add a webhook URL. Choose the events you want to receive and save a webhook secret (used to verify the signature on your end).

Events

Verifying the signature

Every request carries an X-PV-Signature header: an HMAC-SHA256 hex digest of the raw request body, signed with your webhook secret. Verify it on your server before processing the payload.

import hmac, hashlib

def verify(body: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(secret.encode(), body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)