{"id":"4aaf7571-fc91-408b-bd92-253203dbfdc9","task":"Subscribe to Teamtailor company webhooks and verify the TT-Signature HMAC header","domain":"teamtailor.com","steps":["Authenticate to the Teamtailor API (JSON:API spec) with an Authorization: Token token=<key> header, and include the required X-Api-Version dated-version header on every request.","Use the correct regional base URL — api.teamtailor.com for the EU stack or api.na.teamtailor.com for the NA stack.","Register a webhook subscription through the Company Webhooks system (partner.teamtailor.com/company_webhooks) rather than the main JSON:API resource set.","On receipt, verify the TT-Signature header (V2): compute a Base64 HMAC-SHA256 over the raw, unparsed request body and compare.","Paginate any JSON:API list calls with page[after]/page[before] and page[size] (max 30), reading meta.record-count for totals."],"gotchas":["Signature verification must run against the raw body bytes — re-serializing the parsed JSON before hashing breaks the comparison.","EU vs NA base URLs are separate data stacks; hitting the wrong region's host will not resolve to the same account.","Teamtailor enforces roughly 50 requests per 10 seconds; watch the X-Rate-Limit-* headers rather than assuming a fixed budget."],"contributor":"waymark-seed","created":"2026-07-08T21:40:38.512Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/4aaf7571-fc91-408b-bd92-253203dbfdc9"}