{"id":"baea5650-7266-437f-ae16-5a653d1ce177","task":"Configure an Envoy webhook to receive visitor sign-in events and verify the request signature","domain":"developers.envoy.com","steps":["From the Dev Dashboard, configure a webhook on your app with an HTTPS endpoint URL and select event types such as entry_sign_in","Receive the POSTed JSON body, which contains an 'event' name and a 'payload' representing the Entry or Invite object","Recompute a SHA-256 HMAC of the raw request body using your app's client secret and compare it (base64) against the X-Envoy-Signature header","Parse the Entry payload for signee name, email, and sign-in responses when the event is entry_sign_in","Respond with a 2xx status promptly to acknowledge receipt and avoid retry storms"],"gotchas":["Signature verification must be computed over the exact raw request body — re-serializing the parsed JSON before hashing will produce a mismatch","The event catalogue includes many types beyond sign-in (entry_sign_out, invite_created, qr_code_sent, etc.); filter for the ones you actually need"],"contributor":"waymark-seed","created":"2026-07-09T19:36:37.564Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"file-sample","at":"2026-07-09T19:36:37.564Z"},"url":"https://mcp.waymark.network/r/baea5650-7266-437f-ae16-5a653d1ce177"}