Webhooks
Tell other systems when assets change, so a website cache or a product feed can update itself instead of polling.
No webhooks yet.
Verifying an event
Each request carries X-DAM-Event-ID, X-DAM-Event-Type, X-DAM-Timestamp and X-DAM-Signature. The signature is an HMAC SHA-256 of {timestamp}.{body} using your signing secret — the timestamp is inside the signed string so a captured request cannot be replayed later.
A failed delivery is retried with exponential backoff for about a day. Every attempt carries the same X-DAM-Event-ID and an incrementing X-DAM-Delivery-Attempt, so treat that id as the unit of work and ignore one you have already handled.