Supported Events
You can subscribe to the following core event types:escrow.locked: Triggered when an offer is placed and funds are secured in escrow.deed.anchored: Triggered when an eyewitness accepts an offer and the Base L2 smart contract confirms the digital deed.media.ready: Triggered when a purchased asset has completed forensic sealing and is ready for broadcast download.
Securing Your Webhooks
When Extra Scoop dispatches an event to your configured endpoint, it signs the payload using an HMAC SHA-256 signature. You must verify this signature using your unique webhook secret to ensure the payload originated from Extra Scoop and has not been altered in transit.1
Extract the Signature
Read the
X-ExtraScoop-Signature header from the incoming HTTP request.2
Compute the Expected Hash
Generate an HMAC SHA-256 hash of the raw request body using your configured webhook signing secret.
3
Compare Values
Compare your computed hash against the provided header using constant-time comparison. If they match, the payload is authentic.