Features/Webhooks

Real-time delivery events streamed to your backend

Subscribe to supported email lifecycle events and verify the signature before processing incoming notifications.

Automated webhook events log
AI Overview & Executive Summary

What is Mailofly Automated Webhook Events?

Mailofly sends HTTPS notifications for supported email lifecycle events. Payloads are signed with HMAC-SHA256 and failed deliveries receive up to five attempts.

HMAC

SHA256 signature verification

5

Maximum delivery attempts

HTTPS

Event notifications

Specifications

Technical Parameters & Standards

Signature

X-Mailofly-Signature: t=timestamp,v1=hex-digest

Signed content

timestamp.rawBody

Retry policy

Up to 5 attempts; retry delays of 1 minute, 5 minutes, 30 minutes, and 2 hours

Request timeout

10 seconds per attempt

Capabilities

Engineered for developer velocity

Email lifecycle events

Subscribe to supported sent, delivered, opened, clicked, bounced, failed, and complained events.

HMAC-SHA256 signatures

Verify the timestamp and raw JSON payload using your webhook secret.

Bounded retries

Failed HTTP deliveries are retried up to five total attempts.

Workflow

How it works

01

Configure your endpoint

Enter your server URL and select which event types you want to receive.

02

Verify the webhook signature

Validate incoming payloads using our official Node.js, Python, or Go SDKs.

03

Respond with 200 OK

Acknowledge events and trigger downstream user flows, receipts, or analytics syncs.

Q&A

Frequently Asked Questions

Mailofly signs the timestamp and raw JSON body with HMAC-SHA256. Read X-Mailofly-Timestamp and X-Mailofly-Signature, verify the digest over timestamp.rawBody, and reject stale timestamps. The signature header uses t=timestamp,v1=digest.

Ready to build with Automated Webhook Events?

Join thousands of engineering teams delivering transactional and lifecycle email with blazing speed and zero downtime.