Custom Webhook Alerts &
API Incident Payloads
Trigger automated incident workflows, AWS Lambda functions, Kubernetes rollbacks, and internal microservices with HMAC-signed JSON webhooks.
JSON Webhook Payload Specification (`incident.triggered`)
POST request dispatched to your HTTPS endpoint with cryptographic header verification.
{
"event": "incident.triggered",
"incident_id": "inc_9901428fa",
"monitor": {
"id": "mon_55018a",
"name": "Production Stripe Webhook Receiver",
"url": "https://api.yourdomain.com/v1/stripe/events",
"method": "POST",
"interval_seconds": 10
},
"failure": {
"http_status": 502,
"status_text": "Bad Gateway",
"latency_ms": 3410,
"assertion_failed": "Expected status 200, got 502",
"failed_regions": ["us-east-1", "eu-central-1", "ap-south-1"],
"quorum_reached": true,
"consecutive_failures": 2
},
"timestamp": "2026-09-24T01:45:00.000Z",
"signature_header": "X-Uptara-Signature: sha256=a8f2c3..."
}HMAC-SHA256 Signature Verification (Node.js Example)
Protect your receivers by validating the cryptographic HMAC signature against your raw request body.
import crypto from 'crypto';
export function verifyUptaraWebhook(rawBody: string, signatureHeader: string, secret: string): boolean {
const expectedSignature = crypto
.createHmac('sha256', secret)
.update(rawBody)
.digest('hex');
const receivedSignature = signatureHeader.replace('sha256=', '');
return crypto.timingSafeEqual(
Buffer.from(expectedSignature, 'utf8'),
Buffer.from(receivedSignature, 'utf8')
);
}Built for Automation & SRE Integration
Everything required to orchestrate automated incident response and self-healing systems.
HMAC-SHA256 Cryptographic Signatures
Every webhook request includes an X-Uptara-Signature header computed using your secret signing token to prevent spoofing or replay attacks.
Rich JSON Event Payloads
Structured payloads include monitor ID, event type (incident.triggered, incident.resolved), HTTP status, latency, failing regions, and error snippets.
Custom Headers & Auth Tokens
Pass custom Authorization headers, Bearer tokens, or API gateway security headers (e.g. X-Api-Key) with every dispatched webhook.
Automatic Retries & Exponential Backoff
If your receiving endpoint returns a 5xx error or times out, Uptara automatically retries up to 3 times with exponential backoff.
Serverless & CI/CD Automation
Trigger AWS Lambda, Google Cloud Functions, GitHub Actions, or Zapier workflows to auto-scale pods, rollback deploys, or post status updates.
Multi-Region Quorum Filtering
Webhooks are triggered only after multi-region quorum validation confirms real downtime, shielding your downstream automation from jitter.
Frequently Asked Questions: Webhook Uptime Alerts
Uptara dispatches an HTTP POST request with Content-Type: application/json. The body contains the full event structure including event type (incident.triggered, incident.resolved, latency.degraded), monitor metadata, timestamp, HTTP status, and failing region details.
Uptara includes an X-Uptara-Signature header containing the HMAC-SHA256 hash of the request body generated with your shared secret key. In your webhook handler, compute the HMAC-SHA256 hex digest of the raw request body using your secret and perform a timing-safe equality check against the header.
Uptara expects a 2xx HTTP response within 5000ms. If the request times out or returns a non-2xx status, Uptara retries up to 3 times with exponential backoff (e.g., at 10s, 30s, and 90s intervals).
Yes. In the Uptara Dashboard > Settings > Alert Integrations > Custom Webhook, click "Send Test Webhook" to send a sample incident.triggered payload directly to your server.
API Reliability & Monitoring Ecosystem
Explore connected platform capabilities, in-depth engineering guides, and interactive developer utilities.
Related Capabilities
Outage Detection
Automated 2-of-3 multi-region quorum consensus and anti-flapping failure detection to eliminate false alarms and track MTTR.
PagerDuty Integration
Auto-trigger, acknowledge, and resolve PagerDuty incidents via Events API v2 with multi-region quorum consensus.
Slack Alerts
Rich Block Kit incident notifications in Slack channels with status codes, latency spikes, and curl reproduction commands.