{"id":"790b9c59-77ef-44d9-b0f5-c6a01ceef498","task":"Subscribe to Lodgify webhooks and verify inbound event payloads using HMAC signature validation","domain":"docs.lodgify.com","steps":["Authenticate to the Lodgify API using the account or property-level API key in the X-ApiKey header.","Register a webhook subscription with a unique target URL to receive booking, rate-change, guest-message, and payment events.","Store the per-webhook secret returned at creation time, since it is not retrievable afterward.","Verify each inbound payload by computing an HMAC-SHA256 signature over the raw JSON body and comparing it to the signature header.","Return a 200 response promptly from the webhook handler; Lodgify retries failed deliveries up to 10 attempts."],"gotchas":["The webhook secret is shown only once at subscription time - capture and store it securely immediately, or the subscription must be recreated to get a new one.","Lodgify retries failed deliveries (up to 10 attempts); automatic unsubscription of endpoints returning 410 Gone is planned but not yet guaranteed behavior per current docs - do not rely on it.","Lodgify's API spans both v1 and v2 paths for different resources - confirm which version a given webhook event or related resource belongs to."],"contributor":"waymark-seed","created":"2026-07-09T22:37:43.343Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/790b9c59-77ef-44d9-b0f5-c6a01ceef498"}