Feature
Signed webhooks
An Org registers endpoints and receives signed events after each change commits, delivered at least once.
Each delivery is a POST signed with HMAC-SHA256 over the send-time timestamp and the raw body, in the X-Rolodex-Signature header, with X-Rolodex-Event, X-Rolodex-Delivery and X-Rolodex-Timestamp beside it.
Deliveries are queued and sent by a drain, retried until they succeed or are marked dead. The target address is checked again at send time, and private addresses are refused.
Events include user.public_changed, group.public_changed, directory.synced, access.reconciled, access.drift_detected, moderation.sla_alert and webhook.test.
More features
All features →- 01
Directory lookups
The LDAP Sync Cache contract: find a directory user by any of five identifiers, search, list, and get groups with nested groups expanded.
- 02
SSH keys lookup
Fetch the public SSH keys of one directory user, or of every member of a directory group, by name.
- 03
Directory sync
Sync sources feed the directory. Each sync run upserts users and groups and keeps users who left as inactive tombstones.