Webhook Catalog

Complete reference of all webhook event types available in the EventZR platform. Configure endpoints in the Developer Console to receive real-time notifications.

Quick Setup

Register a webhook endpoint via the API or Developer Console. EventZR will send POST requests with a CloudEvents 1.0 payload for each subscribed event type.

cURL

curl -X POST https://api.eventzr.com/integrationhub/v1/webhooks \
  -H "Authorization: Bearer <token>" \
  -H "x-tenant-id: <tenant-id>" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://yourapp.com/webhooks/eventzr",
    "events": ["event.created", "ticket.purchased"],
    "secret": "whsec_your_signing_secret"
  }'

Event Types

Event Type	Source Service	Description
event.created	event-svc	Fired when a new event is created
event.published	event-svc	Fired when an event goes live
event.cancelled	event-svc	Fired when an event is cancelled
ticket.purchased	ticketing-svc	Fired when a ticket is purchased
ticket.checked_in	ticketing-svc	Fired on QR code check-in
ticket.refunded	ticketing-svc	Fired when a refund is processed
user.registered	user-svc	Fired when a new user registers
user.verified	auth-svc	Fired when email verification completes
team.member_added	team-svc	Fired when a member joins a team
team.role_changed	team-svc	Fired when a role is changed
payment.completed	wallet-svc	Fired on successful payment
payment.failed	wallet-svc	Fired on payment failure
booking.confirmed	booking-svc	Fired when a booking is confirmed
ai.inference_complete	llm-orch-svc	Fired when an AI job finishes

Payload Format

All webhook payloads follow the CloudEvents 1.0 specification. The data field contains the event-specific payload.

JSON

{
  "specversion": "1.0",
  "type": "eventzr.ticket.purchased.v1",
  "source": "urn:eventzr:ticketing-svc",
  "id": "evt-uuid-here",
  "time": "2026-03-17T10:30:00Z",
  "datacontenttype": "application/json",
  "tenantid": "tenant-uuid",
  "data": {
    "ticketId": "tkt-123",
    "eventId": "evt-456",
    "buyerId": "usr-789",
    "amount": 99.00,
    "currency": "USD"
  }
}

Signature Verification

Every webhook delivery includes an x-eventzr-signature header. Always verify this signature before processing the payload.

Node.js

import crypto from 'crypto';

function verifySignature(payload: string, signature: string, secret: string): boolean {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(payload, 'utf8')
    .digest('hex');
  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

Retry Policy

Failed deliveries (non-2xx response or timeout after 20 seconds) are retried up to 6 times with exponential backoff: 30s, 2m, 10m, 1h, 4h, 24h. After 6 consecutive failures, the webhook endpoint is automatically disabled.