Which webhook events are available and how are they signed?

Q: Which webhook events are available and how are they signed?

ShortGo can send these webhook events to your endpoint: link.created , link.deleted link.clicked — high volume, so make sure your endpoint can keep up overlay.response — a visitor answered a CTA overlay (form, poll, signup…) bio.submission — a form on a bio page was submitted Every delivery is signed with HMAC-SHA256 . The signature is in the X-ShortGo-Signature header as sha256=... , computed over . with your webhook secret. Recompute it on your side and reject mismatches. Failed deliveries are retried. Details are at /developers.

Question

Accepted Answer

ShortGo can send these webhook events to your endpoint:

link.created, link.deleted
link.clicked — high volume, so make sure your endpoint can keep up
overlay.response — a visitor answered a CTA overlay (form, poll, signup…)
bio.submission — a form on a bio page was submitted

Every delivery is signed with HMAC-SHA256. The signature is in the X-ShortGo-Signature header as sha256=..., computed over <timestamp>.<body> with your webhook secret. Recompute it on your side and reject mismatches. Failed deliveries are retried. Details are at /developers.