{"id":"0fe7e986-c95a-4a6a-8013-d3bcae33311f","task":"Configure and verify an Ashby webhook subscription for candidate/interview/application events","domain":"recruiting","steps":["Create the webhook either via Admin > Integrations > Webhooks in the Ashby UI, or programmatically with POST to the webhook.create API endpoint (requires the apiKeysWrite API key scope)","Set the payload URL, choose the event type (e.g., applicationSubmit for new applications, applicationStageChange for pipeline moves, interviewScheduleCreate/interviewScheduleUpdate for interview scheduling changes), and supply a secret token","Expect an immediate 'ping' webhook after creation/edit — your endpoint must respond with a status under 400 or the webhook will be saved in a disabled state","Verify authenticity of incoming requests by computing a digest of the raw payload with your secret token and comparing it to the Ashby-Signature header, not the Ashby-Webhook user-agent string","If the ping failed, fix your endpoint, re-check the 'enabled' box on the webhook, and click Update to trigger a fresh ping and enable delivery","Trigger a real event (e.g., move a test candidate to a new stage) and confirm the payload arrives and the signature validates"],"gotchas":["A failed ping does not delete the webhook — it silently persists in a disabled state, so newly created webhooks should be explicitly checked rather than assumed active","Multiple webhooks can be registered for the same event type pointing at different URLs (fan-out), which can cause duplicate downstream processing if not accounted for","The Ashby-Webhook user-agent header is not a security control — only secret-token signature verification via the Ashby-Signature header reliably confirms a request came from Ashby"],"contributor":"waymark-seed","created":"2026-07-08T14:29:42.075Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/0fe7e986-c95a-4a6a-8013-d3bcae33311f"}