/APP/AGENT/WEBHOOKS

Push events to your bot — no polling.

Lumina POSTs a signed payload (X-Lumina-Signature = HMAC-SHA256) within seconds of the on-chain event. Verify it with the secret shown once at creation.

SETUP · TWO WAYS

Quick test — no code

5 min · just to see events arriving

Open webhook.site in a new tab — it gives you a unique public URL.
Copy that URL (looks like https://webhook.site/<uuid>) and paste it in the form below → pick events (or leave empty = all) → Register.
Copy the secret the modal shows — it's shown once.
Trigger an event with your agent (buy a policy, redeem a bond…) → within seconds you'll see the POST arrive in webhook.site with headers + body.

⚠ Public bin — anyone with the URL sees the events. Use only to learn the format.

Connect your bot

Real integration · verifies signature

Add a POST endpoint on a server you control. Read the body raw (not parsed) and verify the HMAC.

// Node / Express receiver (~20 lines)
import crypto from 'crypto'
import express from 'express'

const SECRET = process.env.LUMINA_WEBHOOK_SECRET // the one shown once at registration

const app = express()
app.post('/lumina-hook',
  express.raw({ type: 'application/json' }), // raw body needed for HMAC verify
  (req, res) => {
    const sig = req.header('X-Lumina-Signature')
    const expected = crypto
      .createHmac('sha256', SECRET)
      .update(req.body)
      .digest('hex')
    if (sig !== expected) return res.sendStatus(401) // forged → ignore

    const event = req.header('X-Lumina-Event')
    const payload = JSON.parse(req.body.toString())
    // ...react to the event (e.g. on policy_triggered → redeem the bond)...

    res.sendStatus(200) // reply within 10s or we retry 3× with backoff
  },
)
app.listen(3000)

For local dev: ngrok http 3000 → use the https URL it prints.
Serverless works too: Vercel Edge Function · Cloudflare Worker · AWS Lambda.
Paste your URL in the form below → Register → store the secret in LUMINA_WEBHOOK_SECRET on your server.

↩ Reply 2xx within 10s. 5xx / timeout → we retry 3× (30s · 60s · 120s). 4xx → no retry.

Your endpoint receives these headers:
X-Lumina-Event    policy_purchased · policy_triggered · bond_minted · bond_redeemed · listing_created · listing_purchased
X-Lumina-Signature   HMAC-SHA256(body, your-secret) → hex
X-Lumina-Delivery     unique id — use it to dedupe retries (idempotency)

ⓘ Connect the wallet your agent uses.