Webhooks

Receive signed events when things happen in Motif.

Webhooks push events to your backend as they happen, so you can mirror Motif activity into your own systems without polling. Configure endpoints under Settings → Webhooks in the admin panel.

---

Events

Subscribe an endpoint to the events you care about. Each fires when the matching thing happens in Motif.

Event	Fires when
user.created / user.updated / user.deleted	An end user changes
profile.computed	An investor profile is computed
strategy.created / strategy.executed	A strategy is generated or executed
report.generated	A report finishes
kyc.approved / kyc.rejected	A KYC decision is made
order.created / order.completed / order.failed	An order changes state

The admin panel lists the current set of subscribable events when you configure an endpoint.

---

Setup

1. Go to Settings → Webhooks and add an endpoint URL.

2. Choose the events to subscribe to.

3. Copy the signing secret. It is shown once at creation.

---

Verifying delivery

Outbound calls are signed so you can confirm they came from Motif and weren't tampered with. Payloads carry an HMAC-SHA256 signature computed from the raw request body and your endpoint's signing secret. On receipt, recompute the HMAC over the raw body and compare:

import { createHmac, timingSafeEqual } from 'node:crypto'

function isValidSignature(rawBody: string, signature: string, secret: string) {
  const expected = createHmac('sha256', secret).update(rawBody).digest('hex')
  return timingSafeEqual(Buffer.from(signature), Buffer.from(expected))
}

Compute the HMAC over the raw request body, before any JSON parsing. Re-serializing can change the bytes and break verification.

---

Delivery

Deliveries are retried on failure. Respond 2xx quickly to acknowledge receipt and do heavy work asynchronously. Treat events as at-least-once and deduplicate on the event id. Webhooks are the supported way to stream Motif's activity outside the admin panel.