Webhooks

1POST /your-webhook-url HTTP/1.1
2Content-Type: application/json
3X-FlowLink-Event: command_denied
4X-FlowLink-Signature: sha256=abc123def456...
5X-FlowLink-Delivery: del_xyz789
6X-FlowLink-Timestamp: 2026-01-15T14:30:00Z
7
8{
9  "event_id": "evt_abc123",
10  "event_type": "command_denied",
11  "timestamp": "2026-01-15T14:30:00Z",
12  "organization_id": "org_xyz",
13  "agent_id": "agent-prod-01",
14  "delivery_id": "del_xyz789",
15  "payload": {
16    "command": "rm -rf /tmp/app",
17    "shield_result": {
18      "risk_score": 95,
19      "threats": ["destructive_command", "path_traversal"],
20      "layer": "L2"
21    },
22    "policy_id": "pol_deny_rm",
23    "session_id": "sess_abc123",
24    "correlation_id": "mcp:1705332000123:a1b2c3d4",
25    "user": "claude-agent"
26  }
27}

1import hmac, hashlib
2
3def verify_webhook(request):
4    secret = "whk_your_secret"
5    signature = request.headers.get(
6        "X-FlowLink-Signature", ""
7    ).replace("sha256=", "")
8    expected = hmac.new(
9        secret.encode(),
10        request.body,
11        hashlib.sha256
12    ).hexdigest()
13    return hmac.compare_digest(signature, expected)

1const crypto = require('crypto');
2
3function verifyWebhook(req) {
4  const secret = 'whk_your_secret';
5  const signature = req.headers['x-flowlink-signature']
6    .replace('sha256=', '');
7  const expected = crypto
8    .createHmac('sha256', secret)
9    .update(req.rawBody)
10    .digest('hex');
11  return signature === expected;
12}

1func verifyWebhook(body []byte, signature, secret string) bool {
2    mac := hmac.New(sha256.New, []byte(secret))
3    mac.Write(body)
4    expected := hex.EncodeToString(mac.Sum(nil))
5    return hmac.Equal([]byte(signature), []byte(expected))
6}

1{
2  "retry_policy": {
3    "max_retries": 5,
4    "backoff_multiplier": 6,
5    "initial_delay_seconds": 30,
6    "max_delay_seconds": 3600,
7    "timeout_seconds": 10,
8    "auto_disable": true
9  }
10}

1curl -X POST "https://api.flowlink.io/v1/webhooks" \
2  -H "Authorization: Bearer $TOKEN" \
3  -H "Content-Type: application/json" \
4  -d '{
5    "name": "slack-security-alerts",
6    "url": "https://hooks.slack.com/services/T0/B0/xxx",
7    "secret": "whk_your_webhook_secret",
8    "events": ["command_denied", "agent_health_changed", "approval_requested"],
9    "headers": {
10      "X-Custom-Header": "my-value"
11    },
12    "retry_policy": {
13      "max_retries": 5,
14      "backoff_multiplier": 6
15    },
16    "active": true
17  }'

1{
2  "id": "web_abc123",
3  "name": "slack-security-alerts",
4  "url": "https://hooks.slack.com/services/T0/B0/xxx",
5  "active": true,
6  "events": ["command_denied", "agent_health_changed", "approval_requested"],
7  "custom_headers": { "X-Custom-Header": "my-value" },
8  "retry_policy": {
9    "max_retries": 5,
10    "backoff_multiplier": 6
11  },
12  "created_at": "2026-01-15T14:00:00Z",
13  "delivery_count": 0,
14  "last_delivery_at": null
15}

1# Просмотр доставок webhook
2curl -s "https://api.flowlink.io/v1/webhooks/web_abc123/deliveries?limit=5" \
3  -H "Authorization: Bearer $TOKEN" | jq

1{
2  "deliveries": [
3    {
4      "id": "del_xyz789",
5      "webhook_id": "web_abc123",
6      "event_id": "evt_abc123",
7      "event_type": "command_denied",
8      "status": "succeeded",
9      "http_status": 200,
10      "response_time_ms": 245,
11      "attempt": 1,
12      "sent_at": "2026-01-15T14:30:00Z",
13      "response_body": "ok"
14    }
15  ],
16  "pagination": {
17    "total": 1247,
18    "limit": 5,
19    "offset": 0,
20    "has_more": true
21  }
22}

1# Создаём webhook для Slack
2curl -X POST "https://api.flowlink.io/v1/webhooks" \
3  -H "Authorization: Bearer $TOKEN" \
4  -H "Content-Type: application/json" \
5  -d '{
6    "name": "security-alerts-slack",
7    "url": "https://hooks.slack.com/services/T00/B00/XXXXXXXX",
8    "secret": "whk_slack_secret",
9    "events": ["command_denied", "approval_requested", "agent_health_changed"],
10    "headers": { "Content-Type": "application/json" }
11  }'