X-API-Key) autentica chamadas /v1/.... A sessão do portal gere projectos/webhooks. Não mistures os dois contratos.
Event: revocation.completed
Fired when an approval revocation is confirmed on-chain.
Headers:
X-NZOChain-Signature: sha256=<hmac>X-NZOChain-Event: revocation.completed
Verifying authenticity
HMAC-SHA256 of the raw JSON body with yourwhsec_* secret. Compare to X-NZOChain-Signature (prefix sha256=).
Delivery
- HTTPS only (SSRF protections apply)
- Retries: 1s → 5s → 30s
- Expect HTTP 2xx; non-2xx marks the webhook as failing after retries
docs/WEBHOOKS.md.