generated: '2026-10-18'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://promptessor.com/dev/docs/webhooks/overview
sources:
- https://promptessor.com/dev/docs/webhooks/overview
- https://promptessor.com/dev/docs/webhooks/events
- https://promptessor.com/dev/docs/webhooks/signatures-and-retries
description: PrompTessor webhooks deliver signed JSON events via HTTPS POST. Receivers must verify the HMAC‑SHA256 signature in the `x-promptessor-signature`
  header (computed over `timestamp + "." + rawBody` using the endpoint secret) and may use the `x-promptessor-timestamp` header for replay protection.
  Deliveries are considered successful on any 2xx response and are retried with exponential back‑off up to a maximum of 8 attempts.
events:
- event: operation.succeeded
  description: A credit-consuming REST or MCP AI operation completes successfully.
- event: operation.failed
  description: A started AI operation fails; reserved usage is released.
- event: operation.cancelled
  description: A pending asynchronous operation is cancelled.
- event: usage.threshold_reached
  description: Monthly usage reaches the 80% threshold.
- event: usage.exhausted
  description: Monthly usage is at its limit and add‑on balance is zero.
- event: addon_usage.low
  description: The remaining add‑on balance reaches 10.
- event: library.item.published
  description: An owned Prompt Library item is published to Community Prompts.
- event: webhook.test
  description: A one‑off endpoint test is requested; this event is sent only to that endpoint and is not a subscription option.
delivery:
  signature: x-promptessor-signature (v1=<lowercase hex HMAC‑SHA256>)
  content_type: application/json
note: Signature is verified by computing HMAC‑SHA256 over `x-promptessor-timestamp + "." + rawBody` using the endpoint secret and comparing the
  hex digest to the value after `v1=` in a constant‑time manner. The `x-promptessor-timestamp` header provides a Unix timestamp in seconds for
  replay protection. The `x-promptessor-delivery` header provides a stable delivery identifier for deduplication, and `x-promptessor-event` indicates
  the event type. The `user-agent` header is `PrompTessor-Webhooks/1.0`.
docs: https://promptessor.com/dev/docs/webhooks/overview