Drıftstack

Acting as

General

Overview

Developers

API keys
Webhooks

Account

Usage
Billing
Audit log
Team
Privacy & security
Saved credentials
Settings
Help

Open admin panel

—

Account settings

Theme

↑↓ navigate ↵ run esc close

Choose a plan Contact support

Acting as —. Team access is being verified. Until then, treat this workspace as read-only.

Before you can create new API keys, please review and accept the following:

Signed event notifications sent to your server

Webhook endpoints

Get a notification on your server when something happens in your account, like a session finishing or failing.

Docs

New webhook endpoint

URL Your server needs to reply with a success status (2xx) within 10 seconds, or the delivery counts as failed.

Must start with https://.

Events to subscribe to session.completed: a session finishedsession.failed: a session failedapi_key.revoked: an API key was revokedsession.egress_capability_changed: a session's proxy status changedcrypto.order.paid: a crypto payment completedcrypto.order.failed: a crypto payment failedsession.challenge_detected: a challenge appeared in a sessionsession.profile_save_failed: a profile failed to save

session.completed session.failed api_key.revoked session.egress_capability_changed crypto.order.paid crypto.order.failed session.challenge_detected session.profile_save_failed

Description (optional)

Endpoint created

Copy this signing secret now — it won't be shown again. Use it with the SDK's verifyWebhookSignature helper to check that each delivery really came from Driftstack.

Signing secret rotated

Copy the new secret now — it won't be shown again. The old secret keeps working until the time shown below. Update your server with the new secret before then, or it will start rejecting deliveries.

Endpoint

New secret

Old secret valid until

Edit endpoint

URL

session.completed session.failed api_key.revoked session.egress_capability_changed crypto.order.paid crypto.order.failed session.challenge_detected session.profile_save_failed

Description

Active Uncheck to pause delivery without deleting the endpoint.

No webhook endpoints yet

Get notified when a session finishes or fails. Add a URL and pick the events you want.

How delivery, retries and signing work

Each endpoint gets its own signing secret so you can check that a notification really came from Driftstack — the SDK's verifyWebhookSignature helper does this for you.

If a delivery fails, we retry it up to 5 times with increasing delays. After that it's marked undelivered and kept in the delivery log, where you can replay it yourself — we don't retry automatically beyond that. Every delivery is signed (HMAC-SHA256) and carries a timestamp; the SDK helper rejects deliveries more than 5 minutes old.

Read the docs →