Webhooks
Receive signed KorClaw events at your HTTPS endpoints.
Configure webhook endpoints in Dashboard → Webhooks. KorClaw delivers events via POST with HMAC-SHA256 signatures. Webhook management is dashboard-only — there is no public v1 API for webhook CRUD.
Supported events
| Event | When it fires |
|---|---|
| agent.created | POST /agents creates a new agent |
| policy.updated | POST or PATCH /policies creates or updates a policy |
| audit.created | Policy evaluate, runtime execute, or POST /audit records an audit event |
| approval.completed | PATCH /approvals/{id} approves or rejects an approval |
| billing.updated | Subscription or billing status changes (not from v1 API) |
Subscribe to specific events or use * for all events. Paused webhooks are skipped.