Webhooks

{
  "event": "filing.created",
  "timestamp": "2026-03-14T16:30:38Z",
  "data": {
    "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "ticker": "AAPL",
    "company_name": "Apple Inc.",
    "accession_number": "0000320193-26-000042",
    "filing_url": "https://www.sec.gov/Archives/edgar/data/...",
    "filed_at": "2026-03-14T16:30:00Z",
    "items": ["2.02", "9.01"],
    "summary": {
      "headline": "Q1 2026 revenue beats estimates by 8%",
      "sentiment": "bullish",
      "bullet_1": "Revenue $124.3B vs $115.2B est.",
      "bullet_2": "Services segment hits all-time high at $26.1B",
      "bullet_3": "Guidance raised for Q2 2026",
      "guidance_change": "raised",
      "beat_miss": "beat"
    },
    "e2e_latency_ms": 38200
  }
}

import crypto from "crypto";

function verifyWebhook(body: string, signature: string, secret: string): boolean {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(body, "utf8")
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected),
  );
}

// In your handler:
app.post("/webhook", (req, res) => {
  const signature = req.headers["x-8kintel-signature"] as string;
  const body = JSON.stringify(req.body);

  if (!verifyWebhook(body, signature, WEBHOOK_SECRET)) {
    return res.status(401).send("Invalid signature");
  }

  const event = req.body;
  console.log(`[${event.data.ticker}] ${event.data.summary.headline}`);
  res.status(200).send("OK");
});

import hmac
import hashlib

def verify_webhook(body: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(
        secret.encode(), body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(signature, expected)

# In your Flask handler:
@app.route("/webhook", methods=["POST"])
def handle_webhook():
    signature = request.headers.get("X-8KIntel-Signature", "")
    if not verify_webhook(request.data, signature, WEBHOOK_SECRET):
        return "Invalid signature", 401

    event = request.json
    print(f"[{event['data']['ticker']}] {event['data']['summary']['headline']}")
    return "OK", 200

{
  "id": "wh_abc123",
  "url": "https://your-server.com/webhook",
  "events": ["filing.created"],
  "active": true,
  "secret": "whsec_a1b2c3d4e5f6..."
}