Skip to content
Dockt Dockt DOCKT

Receive a Dockt webhook event

POST

Dockt delivers events at least once and does not guarantee ordering. Deduplicate by X-Dockt-Event-Id. Verify X-Dockt-Signature as the lowercase hexadecimal HMAC-SHA256 of <timestamp>.<raw request body> using the endpoint signing secret; the header value is prefixed with v1=. Compare signatures in constant time and reject timestamps outside a five-minute replay window. Any 2xx response acknowledges delivery; other responses and timeouts are retried up to 10 total attempts with exponential backoff capped at 60 seconds. The default delivery timeout is 10 seconds.

Parameters

Section titled “ Parameters ”

Header Parameters

Section titled “Header Parameters ”
X-Dockt-Event-Id
required
string
/^evt_[A-Za-z0-9]+$/
Example 
evt_example1042

Stable event id. Repeated deliveries of the same event use the same id.

X-Dockt-Event-Type
required
string
Allowed values: assessment.completed document.completed document.failed webhook.test
Example 
assessment.completed

Event type matching the JSON body type field.

X-Dockt-Timestamp
required
string format: date-time
Example 
2026-08-06T09:35:00Z

ISO 8601 timestamp included in the signed message.

X-Dockt-Signature
required
string
/^v1=[0-9a-f]{64}$/

Signature formatted as v1=.

Request Body required

Section titled “Request Body required ”
Media type application/json
Any of:

Webhook event envelope for document lifecycle events.

object
object
required
string
Allowed values: event
id
required

Unique Dockt event identifier.

string
/^evt_[A-Za-z0-9]+$/
type
required
string
Allowed values: document.completed document.failed
created_at
required

ISO 8601 date-time string.

string format: date-time
data
required

Compact document summary for a lifecycle event. Fetch the canonical Document for evidence detail.

object
document
required

Compact document representation returned from collection reads.

object
object
required
string
Allowed values: document
id
required

Unique Dockt document identifier.

string
/^doc_[A-Za-z0-9_]+$/
workspace_id
required

Unique Dockt workspace identifier.

string
/^wsp_[A-Za-z0-9_]+$/
assessment_id
required
Any of:

Assessment identifier associated with a document.

string
/^ast_[A-Za-z0-9_]+$/
status
required

Processing lifecycle state for a workspace document.

string
Allowed values: uploaded processing completed failed withdrawn
document_result
required
Any of:

Document-intrinsic verdict produced after processing completes.

string
Allowed values: valid review_required invalid
filename
required
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
classified_as
required
Any of:

Dockt document classification assigned after processing.

object
family
required
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
type
required
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
variant
required
Any of:
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
issues
required
Array<object>

Machine-readable document issue with a human-readable reason.

object
code
required
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
reason
required
minLength(1)

A string at least 1 character(s) long

string
>= 1 characters
uploaded_at
required

ISO 8601 date-time string.

string format: date-time
completed_at
required
Any of:

ISO 8601 date-time string.

string format: date-time

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Event accepted.

204

Section titled “204 ”

Event accepted with no response body.