> ## Documentation Index
> Fetch the complete documentation index at: https://docs.weav.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhook delivery

> When subscribed events occur, Weav sends an HTTPS POST request to your configured webhook URL.

Verification headers:
- `X-Weav-Event`: event type
- `X-Weav-Signature`: HMAC SHA-256 of the raw JSON body using your webhook secret
- `Content-Type`: `application/json`

Delivery behavior:
- Any `2xx` response is treated as success
- `410 Gone` deactivates the webhook immediately
- Other non-2xx responses are retried up to 10 attempts with exponential backoff (1m, 2m, 4m, ...)
- Webhooks are auto-deactivated after repeated permanent failures

This section is reference-only to document payload shape and verification guidance.



## OpenAPI

````yaml /api-reference/openapi.json webhook organization.event
openapi: 3.1.0
info:
  title: Weav API
  version: 1.0.0
  description: |
    Public API for Weav workspace integrations.
    Base URL is versioned under /v1 and requires bearer token authentication.
    Token abilities are enforced:
    - `external-api:read` for read endpoints
    - `external-api:write` for write endpoints
    - `external-api:write` also grants read access
servers:
  - url: https://api.weav.com/v1
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Agents
  - name: Companies
  - name: Conversations
  - name: Customers
  - name: Messages
  - name: Training Data
  - name: Webhooks
paths: {}
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: API Token
      description: |
        Workspace API token.
        Include abilities `external-api:read` and/or `external-api:write`.

````