Overview

HookBridge API (1.0.0)

HookBridge is a webhook delivery reliability platform that provides:

• Guaranteed delivery with intelligent retries
• Full observability through logs and metrics
• HMAC signing for security
• Idempotency guarantees
• Replay capabilities for failed deliveries

Authentication

All API requests require authentication via API key. Include your API key in the Authorization header:

Authorization: Bearer hb_live_xxxxxxxxxxxxxxxxxxxx

API keys can be created and managed via the /v1/api-keys endpoints or through the web console.

Rate Limits

• Project-level: 1000 requests per minute
• Endpoint-level: 10 requests per second

Webhook Delivery

When HookBridge delivers webhooks to your customers’ endpoints, it includes:

• X-Webhook-Signature: HMAC-SHA256 signature for payload verification
• X-Webhook-Id: Unique message ID for tracking
• X-Webhook-Timestamp: Unix timestamp of the original send request
• Custom headers you specify in the send request

• HookBridge Support: https://hookbridge.io/docs - support@hookbridge.io
• License: Proprietary
• OpenAPI version: 3.1.0

Authentication

BearerAuth

API key authentication. Include your API key in the Authorization header:

Authorization: Bearer hb_live_xxxxxxxxxxxxxxxxxxxx

API keys are prefixed with:

• hb_live_ for production keys
• hb_test_ for test/development keys

Security scheme type: http

Bearer format: API Key

SessionAuth

Kratos session cookie authentication for web console endpoints. Used for billing and project management operations.

Security scheme type: apiKey

Cookie parameter name: ory_kratos_session