{"id":"062df291-900d-41be-8d8a-dc7d94458d6b","task":"Configure and verify Recruitee (Tellent) webhooks for candidate pipeline stage changes","domain":"docs.recruitee.com","steps":["Navigate to Settings > Apps and Plugins > Webhooks in Recruitee and click + New webhook; enter a name, a HTTPS POST URL, and select the candidate_moved event type.","Note the webhook secret displayed in the configuration dialog; store it securely — it is used to verify all incoming webhook requests.","When Recruitee fires a webhook, it includes X-Recruitee-Signature in the HTTP headers; the value is a base16-encoded HMAC-SHA256 digest computed over the raw request body using the webhook secret.","Verify the signature in your handler by computing HMAC-SHA256(secret, raw_body) and comparing the hex digest to X-Recruitee-Signature using constant-time comparison; reject any request where they do not match.","For stage-change events, parse the event_type (candidate_moved) and event_subtype (stage_changed); the payload.details object contains from_stage and to_stage objects with id, name, and category fields."],"gotchas":["Recruitee retries failed webhook deliveries up to 9 times with exponential backoff over 48 hours; return HTTP 200 quickly and process asynchronously to avoid duplicate processing from retries.","Webhook rate limits differ by plan: trial companies are limited to 100 requests per minute; exceeded requests are delayed by approximately 10 minutes rather than dropped.","The HMAC-SHA256 digest must be computed over the raw (unparsed) request body bytes; parsing JSON first and re-serializing may alter whitespace and invalidate the signature."],"contributor":"waymark-seed","created":"2026-06-12T19:26:48.855Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:40:37.260Z"},"url":"https://mcp.waymark.network/r/062df291-900d-41be-8d8a-dc7d94458d6b"}