Skip to main content
WEBHOOK
gate.session.approved
{
  "event": "gate.session.approved",
  "service_id": "gsvc_0123456789abcdefghjkmnpqrs",
  "gate_session_id": "gate_0123456789abcdefghjkmnpqrs",
  "gate_account_id": "gacct_0123456789abcdefghjkmnpqrs",
  "account_name": "Acme Growth Workspace",
  "metadata": {
    "source": "signup_form"
  },
  "tripwire": {
    "verdict": "human",
    "score": 0.08
  },
  "delivery": {
    "version": 1,
    "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
    "key_id": "key_6cw04zdmetw8t5rsdppadhper0",
    "public_key": "pk_live_[example_publishable_key]"
  }
}
{
  "encrypted_delivery": {
    "version": 1,
    "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
    "key_id": "key_6cw04zdmetw8t5rsdppadhper0",
    "ephemeral_public_key": "MCowBQYDK2VuAyEA7X6s5q0aQm1Bv1Q0nK5l2o3p9w8y7z6x5c4b3a2f1e0",
    "salt": "l7vW1kYpQ2m8nR4sT6u9xA",
    "iv": "b2M0NnA4cXJ0dXZ3eA",
    "ciphertext": "203.0.113.10",
    "tag": "Y2hhY2hhMjBwb2x5MTMwNQ"
  }
}

Headers

​
X-Tripwire-Timestamp
string
required

Unix timestamp used in the webhook signature base string.

​
X-Tripwire-Signature
string
required

HMAC-SHA256 signature computed over ${timestamp}.${rawBody}.

Body

application/json
​
event
string
required
Allowed value: "gate.session.approved"
Example:

"gate.session.approved"

​
service_id
string
required

Canonical Gate service slug used by the public registry and by npx signup . Lowercase letters, numbers, dashes, and underscores only; must start and end with a letter or number.

Required string length: 3 - 32
Pattern: ^[a-z0-9](?:[a-z0-9_-]{1,30}[a-z0-9])$
Example:

"gsvc_0123456789abcdefghjkmnpqrs"

​
gate_session_id
string
required
Example:

"gate_0123456789abcdefghjkmnpqrs"

​
gate_account_id
string
required
Example:

"gacct_0123456789abcdefghjkmnpqrs"

​
account_name
string
required
Example:

"Acme Growth Workspace"

​
metadata
object
required
Example:
{ "source": "signup_form" }
​
tripwire
object
required
Example:
{ "verdict": "human", "score": 0.08 }
​
delivery
object
required
Example:
{
  "version": 1,
  "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
  "key_id": "key_6cw04zdmetw8t5rsdppadhper0",
  "public_key": "pk_live_[example_publishable_key]"
}

Response

Encrypted delivery response.

​
encrypted_delivery
object
required
Example:
{
  "version": 1,
  "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
  "key_id": "key_6cw04zdmetw8t5rsdppadhper0",
  "ephemeral_public_key": "MCowBQYDK2VuAyEA7X6s5q0aQm1Bv1Q0nK5l2o3p9w8y7z6x5c4b3a2f1e0",
  "salt": "l7vW1kYpQ2m8nR4sT6u9xA",
  "iv": "b2M0NnA4cXJ0dXZ3eA",
  "ciphertext": "203.0.113.10",
  "tag": "Y2hhY2hhMjBwb2x5MTMwNQ"
}