CMS instant updates

What endpoint do I post to?

POST https://geodeck.icu/api/webhook/cms
X-geodeck-Signature: sha256=<hex hmac of raw body>
Content-Type: application/json

What does the payload look like?

{
  "domain": "example.com",
  "url":    "https://example.com/blog/post-slug",
  "event":  "publish"
}

event must be one of publish, update, or unpublish.

Batch submission

{
  "domain": "example.com",
  "urls": [
    "https://example.com/blog/post-one",
    "https://example.com/blog/post-two"
  ],
  "event": "update"
}

Batch mode accepts up to 500 same-host URLs per signed request. In batch mode, omit title, summary, content, and html.

How do I sign the request?

Compute HMAC-SHA256 of the raw request body using the domain's webhook secret. Send hex-encoded with the sha256= prefix.

echo -n "$BODY" | openssl dgst -sha256 -hmac "$SECRET" -hex

What HTTP responses can I expect?

• 202 Accepted - payload queued.
• 401 Unauthorized - missing/invalid signature.
• 401 Unauthorized - domain unknown or not registered.
• 402 Payment Required - monthly ping quota exceeded.

How should I retry on failure?

On a 5xx response from us, retry with exponential backoff (1s, 5s, 30s, 5m). After the third failure, surface the error in your CMS log.

How does this compare to the IndexNow and Google standards?

geodeck's own batch cap is smaller than the wider ecosystem: the IndexNow documentation allows far larger batches per request, and once a search engine receives a ping under the IndexNow protocol it is shared with every other participating engine automatically. Google's AI features documentation confirms there is no separate webhook or file format required for Google's AI features, and its Search Console sitemaps help covers the equivalent non-instant path this endpoint is meant to shortcut.

You can submit up to 10,000 URLs per post, mixing http and https URLs if needed.

— IndexNow documentation

Search engines adopting the IndexNow protocol agree that submitted URLs will be automatically shared with all other participating search engines.

— IndexNow documentation

A successful request will return an HTTP 200 response code; if you receive a different response, verify that you don't submit too often, that the key and URL are valid and resubmit the request.

— IndexNow documentation