Webhooks

Register a Webhook

Receive HMAC-SHA256-signed HTTP POST notifications whenever the strait status changes. Your endpoint must use HTTPS and return 2xx within 10 seconds.

Endpoint URL

Events

Verifying Signatures

Each delivery includes an X-Signature-256: sha256=<hex> header. Compute HMAC-SHA256(secret, rawBody) and compare.

// Node.js verification example
import { createHmac } from 'crypto';

function verify(secret, rawBody, sigHeader) {
  const expected = 'sha256=' +
    createHmac('sha256', secret)
      .update(rawBody)
      .digest('hex');
  return sigHeader === expected;
}

Payload Schema

{
  "event": "status_change",
  "previousStatus": "OPEN",
  "currentStatus": "PARTIALLY_CLOSED",
  "tensionIndex": 62,
  "reason": "Houthi vessels reported near...",
  "timestamp": "2026-05-31T10:00:00.000Z"
}