Webhooks

Receive real-time notifications when agent events occur

Payload format

{
  "id": "uuid",
  "event_type": "AGENT_DENIED",
  "agent_id": "uuid",
  "agent_did": "did:kairos:...",
  "decision": "DENIED",
  "reason": "Scope mismatch",
  "timestamp": "2026-05-25T..."
}

Signature verification

Every delivery includes a signature header. Verify it to ensure payloads are from KairosAI.

const sig = req.headers
  ['x-kairosai-signature']
const expected = 'sha256=' +
  hmac('sha256', secret)
  .update(body).digest('hex')
if (sig !== expected) throw 403

Available events

AGENT_REGISTERED

AGENT_VERIFIED

AGENT_DENIED

AGENT_REVOKED

SCOPE_GRANTED

SCOPE_REVOKED

TOKEN_EXPIRED