Outbound webhooks

Subscribe to platform events at /provider/webhooks. Pick the events you care about (booking.created, booking.confirmed, dispute.opened, …) and the URL we should POST to. We sign every delivery with HMAC-SHA256 over the raw body using the per-subscription secret.

Failed deliveries retry with exponential backoff (5 attempts over ~30 minutes). After the last attempt the event lands in /provider/webhooks → Delivery history with the error captured.