Webhooks

Register an https URL with POST /webhook-endpoints. The response includes secret once — save it.

Events:

• video.ready, video.failed
• job.ready, job.failed

Each delivery includes:

• Braiv-Signature: t=<unix>,v1=<hex>
• Braiv-Event
• Braiv-Delivery

Verify HMAC-SHA256 of timestamp.rawBody with the endpoint secret. Reject timestamps older than 300 seconds. Failed deliveries retry three times (1s, 2s, 4s).

Payload shapes: Webhook event payloads. Endpoints: Webhooks API reference.