> ## Documentation Index
> Fetch the complete documentation index at: https://docs.extrascoop.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Webhooks

> How to subscribe to real-time platform events.

You will learn how to configure webhooks to receive real-time transaction and media updates.

Extra Scoop uses webhooks to notify your newsroom or agency systems when critical asynchronous events occur, such as a deed settling on the blockchain or media finishing verification.

## Supported Events

You can subscribe to the following core event types:

* `escrow.locked`: Triggered when an offer is placed and funds are secured in escrow.
* `deed.anchored`: Triggered when an eyewitness accepts an offer and the Base L2 smart contract confirms the digital deed.
* `media.ready`: Triggered when a purchased asset has completed forensic sealing and is ready for broadcast download.

## Securing Your Webhooks

When Extra Scoop dispatches an event to your configured endpoint, it signs the payload using an HMAC SHA-256 signature.

You must verify this signature using your unique webhook secret to ensure the payload originated from Extra Scoop and has not been altered in transit.

<Steps>
  <Step title="Extract the Signature">
    Read the `X-ExtraScoop-Signature` header from the incoming HTTP request.
  </Step>

  <Step title="Compute the Expected Hash">
    Generate an HMAC SHA-256 hash of the raw request body using your configured webhook signing secret.
  </Step>

  <Step title="Compare Values">
    Compare your computed hash against the provided header using constant-time comparison. If they match, the payload is authentic.
  </Step>
</Steps>
