Skip to main content

Headers

​
x-vort-signature
string
required

sha256= + lowercase hex HMAC-SHA256 of the raw body bytes, keyed with your webhook secret.

Pattern: ^sha256=[0-9a-f]{64}$

Body

application/json
​
event_id
string
required

Unique per event, identical on every retry of it. De-duplicate on this. Opaque.

​
event
string
required
Allowed value: "candidate_revealed"
​
run_id
string<uuid>
required
​
organization_external_id
string
required
​
job_external_id
string
required
​
occurred_at
string<date-time>
required
​
candidate_id
integer<int64>
required

Response

Signature did not verify; the event was not processed.