> ## Documentation Index
> Fetch the complete documentation index at: https://doc.quippy-lab.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhooks Overview

> How Quippy pushes real-time events into your systems.

Webhooks are the "push notification" of the business world. Instead of your
system polling Quippy every few minutes asking "anything new?", Quippy sends
an HTTP `POST` to a URL you own the moment something happens.

Think of it like a **mailbox**. You give Quippy the mailbox address; every
time something interesting happens — an exam finishes, a user is
provisioned, a subscription changes — Quippy drops a note in that mailbox.

## Why push, not pull

<CardGroup cols={2}>
  <Card title="Without webhooks" icon="triangle-exclamation">
    * You log into a dashboard to check for updates.
    * Or you ship a batch export / CSV every week.
    * Your systems are always a little stale.
    * Manual reports, delays, duplicated data entry.
  </Card>

  <Card title="With webhooks" icon="bolt">
    * Exam finishes → your HR system knows within \~1 second.
    * Grade posted → your gradebook updates automatically.
    * New user provisioned → they appear in your CRM.
    * No polling, no exports, no delays.
  </Card>
</CardGroup>

## What Quippy guarantees

<CardGroup cols={3}>
  <Card title="Signed" icon="signature">
    Every delivery carries an **HMAC-SHA256** signature so your receiver can
    verify the payload came from Quippy and wasn't tampered with.
  </Card>

  <Card title="Retried" icon="arrows-rotate">
    If your server is unreachable or returns 5xx, Quippy retries with
    exponential backoff for up to **12 hours**. After that, the delivery is
    dead-lettered — visible in the admin portal and manually replayable.
  </Card>

  <Card title="Observable" icon="chart-line">
    Every delivery — status code, response body, timing — is logged and
    visible per-endpoint in the admin portal.
  </Card>
</CardGroup>

## Where to go next

<CardGroup cols={2}>
  <Card title="Set up a webhook" icon="arrow-right" href="/webhooks/setup">
    Register an endpoint in the admin portal and capture the signing secret.
  </Card>

  <Card title="Verify signatures" icon="shield-check" href="/webhooks/verify-signature">
    The single most important page — how to check `X-Quippy-Signature` in
    your receiver before trusting a payload.
  </Card>

  <Card title="Event catalog" icon="list" href="/webhooks/events">
    Every event Quippy emits, with sample payloads.
  </Card>

  <Card title="Retries and delivery" icon="clock-rotate-left" href="/webhooks/retries">
    How long Quippy keeps trying, and how to replay dead-lettered deliveries.
  </Card>
</CardGroup>