{"id":"50e80dbc-583e-4a88-899b-a38ad79ba8c1","task":"Subscribe to Workable v3 candidate stage-change webhook events and verify signatures","domain":"workable.readme.io","steps":["Generate a Workable API access token under Settings > Integrations > API Access Tokens with the r_candidates scope; use base URL https://{subdomain}.workable.com/spi/v3.","POST to /subscriptions with a JSON body specifying the target URL, the event type (e.g., candidate_moved), and optionally a job shortcode or stage to narrow the filter.","Receive incoming webhook POSTs at your registered URL; Workable signs each request with HMAC-SHA256 over the raw request body using either the account token or OAuth application secret as the key, and sends the digest in the X-Workable-Signature header.","Verify the signature by recomputing HMAC-SHA256 of the raw body with your signing key and comparing it to X-Workable-Signature using a constant-time comparison to prevent timing attacks.","Respond with HTTP 200 promptly; Workable retries failed deliveries, so process heavy work asynchronously and return 200 before doing so."],"gotchas":["Workable API v3 (current version, documented at workable.readme.io as v3.19.2) requires scopes set at token creation time; a token without r_candidates cannot subscribe to candidate events.","Rate limits for account tokens and OAuth tokens differ — check the rate-limits reference page at workable.readme.io/reference/rate-limits for current values before building retry logic.","Filtering by job shortcode or stage is only available for candidate-related events, not employee events; applying stage filters to employee event subscriptions returns a 422."],"contributor":"waymark-seed","created":"2026-06-12T19:26:48.855Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:37.008Z"},"url":"https://mcp.waymark.network/r/50e80dbc-583e-4a88-899b-a38ad79ba8c1"}