Guide to the Partner Webhook Endpoints API

The Partner Webhook Endpoints API lets a partner manage where Everee sends partner events: events about the partner as a whole, such as announcements, as opposed to the events of each company, which go to that company's own webhook endpoints. A partner can have up to three endpoints, and every partner event is sent to each enabled one.

EndpointWhat it does
List partner webhook endpointsLists your endpoints
Get a partner webhook endpointReturns one endpoint
Create a partner webhook endpointAdds an endpoint and returns its signing key
Update a partner webhook endpointChanges its name, URL, or whether it is enabled
Delete a partner webhook endpointRemoves an endpoint
Rotate a partner signing keyIssues a new signing key
Send a test eventSends a test event to an endpoint

These endpoints use your partner API key, like the rest of the Company Onboarding API. A company API key is refused. Everee staff can see your endpoints and what was delivered to them, to help with support, but only you create and change them.

They are served under /integration/v1/partner/webhook-endpoints.

What arrives at a partner endpoint

Partner events use the partner envelope, which has partnerId and no companyId, and every request has the header x-everee-webhook-audience: partner. Requests are signed exactly as company events are: see Authenticating events. Use the signing key of the endpoint that received the request.

An endpoint

FieldMeaning
idThe endpoint's ID, used in every other path
nameA label for the endpoint
urlThe https URL events are sent to
enabledWhether Everee sends events to this endpoint
signingKeyThe key for verifying events. Shown in full only when you create the endpoint or rotate its key, and masked otherwise
previousSigningKeyExpiresAtAfter a rotation, until when the replaced key still signs events
createdAtWhen the endpoint was created

The URL rules, the signing key and rotation, and switching an endpoint off all work as they do for company endpoints: see the Webhook Endpoints API guide. A partner endpoint's signing key starts with psk_.

Setting up an endpoint

  1. Create the endpoint and store the signingKey from the response.
  2. Build your handler to verify the signature, and to accept the partner envelope.
  3. Send a test event and check that your handler accepts it.