Feature
Signed webhooks
Outbound HTTPS notices of catalog changes, minimized and signed with HMAC-SHA256.
Register a webhook for some or all events. Events are named <resource>.<action>, such as service.created or vcs_tenant.updated. Each delivery carries only the type, action, id, name and time of the change.
Deliveries are signed over timestamp.body and sent in the X-YP-Signature header as sha256=<hex>. URLs must be public HTTPS: private addresses and special hostnames are refused. A test delivery and a per-webhook delivery log are available, and webhooks are private to their owner by default.
More features
All features →- 01
Six core resources
Services, Agents, Teams, AWS accounts, Azure accounts and Labels, each with full create, read, update and delete.
- 02
Access rules on every row
A chmod-style Mode on every catalog resource: view, edit and delete bits for the owner, the owner group and everyone else.
- 03
API keys
Machine principals with read or write scope for scripts, CI and other systems.