Set a webhook URL and view deliveries

When you set a destination URL, events such as passkey registrations, logins and revocations are sent as signed JSON through Webhook Admin.

Set the destination URL

  1. Open an environment of the project and click "Environment settings" in the menu.
  2. In the Webhook section, enter the URL that receives events in "Endpoint URL" (for example, https://example.com/sealgate/webhook).
  3. Click "Save".
  • The URL must start with https://.
  • To stop sending, clear the URL and save.
  • Developers, Admins and Owners can set it.
  • The Webhook section appears when webhook delivery is available.

View deliveries and the signing secret

  1. In the Webhook section of "Environment settings", click "Deliveries and signing secret".
  2. In the Webhook Admin page that opens, check deliveries, resend them and view the signing secret.
  • The button appears to Developers, Admins and Owners in environments where a URL has been saved.
  • Each click creates a link valid for 15 minutes. If it has expired, open it again from the button.

Events sent

register.completed, register.failed, login.succeeded, login.failed, credential.revoked, credential.renamed, user.revoked, user.deleted and recovery.issued. The same events are sent when you do the same actions in the dashboard or MCP.

Failed deliveries are retried by Webhook Admin. For signature verification and the shape of data, see Webhook in the API reference.

API reference

For the API, browser SDK and MCP, see the API reference. If you have questions, please contact us.