Webhook
Send PromptVault prompt lifecycle events to your own HTTPS endpoint with optional signature verification.
Send prompt lifecycle events to your own HTTPS endpoint. Use this to wire PromptVault into tools without a first-class connector, such as Slack notifications, internal audit logs, or custom CI pipelines.
What It Does
PromptVault sends prompt events to your endpoint as JSON. If you provide a signing secret, each request includes a signature header so your handler can verify the payload.
Configuration
| Field | Required |
|---|---|
| Endpoint URL | yes |
| Signing secret | optional |
The URL must be reachable over HTTP or HTTPS. HTTPS is recommended for production.
Test
Use Test after connecting to send a one-off ping. Any 2xx response is treated as success.
Event Handling
The webhook receives prompt creation, publish, rollback, and deletion events. Your handler can filter by event type or publish target.
Signature Verification
When a signing secret is configured, PromptVault includes:
X-PromptVault-Signature: sha256=<hex><hex> is an HMAC-SHA256 signature of the raw request body using the signing secret. Verify the signature before trusting the payload.
Handler Guidance
- Return a 2xx response quickly.
- Queue slow work asynchronously.
- Make processing idempotent so repeated events are safe.
- Log unexpected event types for review.