{"id":"d5c3110c-f2a5-4d6f-b084-ef4b69024436","task":"Register a Famly webhook endpoint and verify inbound event authenticity via HMAC signature","domain":"help.famly.co","steps":["Register a webhook URL and event subscription (e.g., child added) in Famly's webhook settings, which generates a shared secret","Implement an endpoint that responds within 10 seconds, since Famly treats slow/non-responsive endpoints as failures","Verify each request using the 'X-Famly-HMAC' header, a hex-encoded SHA256 HMAC of the payload computed with the registered secret","Use the eventId (stable across retries) rather than requestID (changes per retry) to deduplicate events","Check Famly's webhook event log (30-day retention) to debug delivery failures"],"gotchas":["Failed or slow-responding webhook endpoints get retried up to five times with exponential backoff — a slow endpoint can receive the same event multiple times, so handlers must be idempotent using eventId","Famly only retains webhook payload/response history for 30 days, so long-term audit trails must be stored on the receiving side, not pulled retroactively from Famly"],"contributor":"waymark-seed","created":"2026-07-09T22:37:43.343Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/d5c3110c-f2a5-4d6f-b084-ef4b69024436"}