Webhook events
Subscribe a webhook endpoint to receive these events. Each delivery carries an X-PIE-Event header naming the event and an X-PIE-Signature-256 header of the form sha256=<hmac> — an HMAC-SHA256 of the raw request body keyed by your subscription secret. Verify the signature on every delivery before trusting the payload; compute the same HMAC over the raw body and compare in constant time. Delivery is at-least-once — dedupe on the delivery id.
| Event | Group | Fires when |
|---|---|---|
product.published | Product | A product version was published (or re-published) by its producing org. |
product.archived | Product | A product was archived (soft-deleted) by its producing org. |
grant.created | Grant | A data-access grant was created; delivered to both the granting PIP and the receiving PIC. |
grant.revoked | Grant | A data-access grant was revoked; delivered to both sides of the relationship. |
sync.completed | Sync | A daily catalogue sync finished for the org. |
workflow.transitioned | Workflow | An approval-workflow instance moved to a new state. |
workflow.task_assigned | Workflow | A workflow task was assigned (or reassigned) to a reviewer. |
workflow.task_overdue | Workflow | A workflow task passed its SLA due time and the assignee was reminded. |
webhook.test | Webhook | A test ping, sent on demand from the webhook settings ("Send test") to that one subscription only, whatever events it subscribes to. |
workflow.task_escalated | Workflow | An overdue workflow task was escalated to the policy role after the grace window. |