Webhooks
Receive signed KorClaw events at your HTTPS endpoints.
Configure endpoints in Dashboard → Webhooks. Each delivery includes X-KorClaw-Event, X-KorClaw-Delivery, X-KorClaw-Timestamp, and X-KorClaw-Signature (HMAC SHA-256 as t=<unix>,v1=<hex>). Verify the signature before processing and use the delivery ID for idempotency.
| Event | When it fires |
|---|---|
| agent.created | An AI agent is registered. |
| policy.updated | A policy is created or updated. |
| audit.created | An immutable audit event is recorded via the API. |
| approval.completed | An approval is approved or rejected. |
| billing.updated | Subscription or billing status changes. |
Workspace delivery
Outbound webhook management lives in the dashboard today. Use GET /events for API polling of audit activity when you cannot receive push deliveries.