Webhook Events

After you subscribe to a webhook, Hyperstack sends a POST request to your URL each time one of your credentials is published. If publishing fails, no event is sent. This happens for every credential, however it was issued: in the Studio, from a CSV file, through the API or through an integration.

`credential.issued`

The body is JSON, with the header Content-Type: application/json:

{
  "event": "credential.issued",
  "credential": {
    "document_id": "6f1c2a8e-3b4d-4e5f-9a7b-1c2d3e4f5a6b",
    "document_url": "https://hyperstack.id/credential/6f1c2a8e-3b4d-4e5f-9a7b-1c2d3e4f5a6b",
    "recipient": {
      "name": "Jane Doe",
      "email": "jane.doe@example.com"
    },
    "group": {
      "title": "Cloud Security Fundamentals",
      "key": "Kq7Zp2LmX9aB",
      "code": "CSF-2026"
    },
    "metadata": {
      "custom_grade": "A"
    },
    "issued_on": "2026-03-15 10:30:04.887215+00:00"
  }
}

string

Always "credential.issued".

object

The credential that was published.

Show properties

string

ID of the credential. Use it with View Credential.

string

Public page of the credential.

object

The recipient’s name and email.

object

The group’s title, key and code.

object

The credential’s custom attribute values.

string

When the credential was published, in UTC. Note the format: YYYY-MM-DD HH:MM:SS.ffffff+00:00, with a space, not the T used in API responses.

Delivery

Hyperstack waits up to 10 seconds for your endpoint to answer.
Any 2xx status counts as delivered. Return 200 quickly, and do slow work after you answer.
A failed delivery, such as a non-2xx status, a timeout or a connection error, is not retried.
Events can arrive out of order.

Security

Webhook requests are not signed. Before you trust a payload, fetch the credential with View Credential using its document_id. Use an https:// URL that is hard to guess.

API Guide

Credential Groups

Credentials

Recipients

Webhooks

Standards and AI

`credential.issued`

Delivery

Security

​credential.issued

​Delivery

​Security

`credential.issued`

Delivery

Security