← All docs

CMS webhook

Notify geodeck on publish/update/unpublish to trigger llms.txt regeneration and downstream pings.

Endpoint

POST https://geodeck.icu/api/webhook/cms
X-geodeck-Signature: sha256=<hex hmac of raw body>
Content-Type: application/json

Payload

{
  "domain": "example.com",
  "url":    "https://example.com/blog/post-slug",
  "event":  "publish"
}

event must be one of publish, update, or unpublish.

Signing

Compute HMAC-SHA256 of the raw request body using the domain's webhook secret. Send hex-encoded with the sha256= prefix.

echo -n "$BODY" | openssl dgst -sha256 -hmac "$SECRET" -hex

Responses

  • 202 Accepted — payload queued.
  • 401 Unauthorized — missing/invalid signature.
  • 404 — unknown domain.
  • 429 — plan rate limit hit.

Retry

On a 5xx response from us, retry with exponential backoff (1s, 5s, 30s, 5m). After the third failure, surface the error in your CMS log.