POST requests with the body { "event": "<event name>", "payload": { ... } }. When a webhook secret is set, the X-Way-Signature header carries an HMAC of the request body - see Verify signatures. Each page below documents when the event fires, its full payload schema, and a sample delivery.