> ## Documentation Index
> Fetch the complete documentation index at: https://docs.atlaswork.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhooks

> Signed, retried notifications for the full envelope lifecycle.

Webhooks are the preferred way to track envelopes — register an endpoint once and
Atlas pushes lifecycle events to it, instead of you polling.

## What you receive

Every transition in the [envelope lifecycle](/guides/envelope-lifecycle) emits an
event, plus extraction results when requested. Deliveries are:

* **Signed** — every delivery carries a signature so you can verify it came from
  Atlas. Reject any payload that doesn't verify.
* **Retried** — failed deliveries are retried.
* **Destination-validated** — outbound destinations are validated to prevent
  Atlas being used as a request proxy.

## Managing endpoints

From the [dashboard](https://web-atlaswork.vercel.app) you can:

* Register and remove endpoints.
* See delivery history per event.
* Test-fire deliveries to confirm your handler before going live.

## Verifying a delivery

Always verify the signature before trusting a payload:

<Steps>
  <Step title="Read the signature header">
    Each delivery includes a signature derived from the raw request body and your endpoint's signing
    secret.
  </Step>

  <Step title="Recompute over the raw body">
    Compute the expected signature over the **raw** bytes of the request body — not a re-serialized
    object — using your signing secret.
  </Step>

  <Step title="Compare in constant time">
    Reject the delivery if the signatures don't match. Respond `2xx` only after you've durably
    accepted the event.
  </Step>
</Steps>

<Warning>
  Preview and test environments cannot email real signers or hit real customer webhooks. Don't point
  a production webhook endpoint at a non-production Atlas environment.
</Warning>

<Tip>
  Make your handler idempotent: treat a repeated event ID as already-processed. Combined with
  retries, this guarantees at-least-once delivery never causes duplicate side effects.
</Tip>