Outbound webhooks

Events, endpoint registration, and retries.

Webhooks notify your server when events occur in MailingCore (send, open, bounce, unsubscribe, etc.).

Required API key scope: webhooks:manage.

Register an endpoint

POST /webhooks/endpoints
Authorization: Bearer mc_live_xxxx
X-Tenant-Id: clxxxxxxxx

{
  "url": "https://your-app.com/webhooks/mailingcore",
  "events": ["email.sent", "email.bounced", "contact.unsubscribed"],
  "secret": "whsec_optional_or_generated"
}

The response includes the secret for verifying HMAC signatures.

Management

Action	Endpoint
List	`GET /webhooks/endpoints`
Enable/disable	`PATCH /webhooks/endpoints/:id/toggle`
View deliveries	`GET /webhooks/endpoints/:id/deliveries`
Delete	`DELETE /webhooks/endpoints/:id`

Available events

email.sent, email.delivered, email.opened, email.clicked
email.bounced, email.complained, email.failed
contact.unsubscribed

Delivery

Events are queued in mc:webhook-delivery with retries. Each request includes the signature header:

X-MailingCore-Signature: t=1719763200,v1=abc123...

See Verify HMAC signature.