Webhooks

Base URL: https://api.aikloop.example/v3

Send your secret key as a Bearer token in the Authorization header: Authorization: Bearer sk_live_... (or sk_test_... in test mode).

EVENT Webhook request

Every webhook request is signed.

HeaderDescription
AIKloop-Signaturet=<timestamp>,v1=<signature>. t is the Unix timestamp: reject events older than 5 minutes. v1 is the HMAC-SHA256 of "{t}.{raw_body}" with your whsec_ signing secret: compare it in constant time.