Webhooks that tell your code when captures are ready

curl -X POST "https://app.snap-render.com/v1/webhooks" \
  -H "X-API-Key: sk_live_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://your-server.com/hooks/snaprender",
       "events": ["screenshot.completed", "change.detected"]}'

# The response includes the signing secret, shown once:
# { "id": "...", "secret": "whsec_...", "events": [...] }

import crypto from 'node:crypto';

function verify(rawBody, signature = '', secret) {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');
  return signature.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
}

// rawBody = the unparsed request body
if (!verify(rawBody, req.headers['x-snaprender-signature'], process.env.WEBHOOK_SECRET)) {
  return res.status(401).send('Invalid signature');
}

import hashlib, hmac

def verify(raw_body: bytes, signature: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(signature or "", expected)

# Flask: verify(request.get_data(), request.headers.get("X-SnapRender-Signature"), SECRET)

curl -X POST "https://app.snap-render.com/v1/webhooks/WEBHOOK_ID/test" \
  -H "X-API-Key: sk_live_your_key_here"

{ "statusCode": 200, "success": true, "deliveredAt": "2026-10-07T09:14:31.000Z", ... }