Daftarkan endpoint HTTPS publik di Dashboard → Developer → Webhooks. s.id bakal kirim POST payload JSON bertanda tangan ke URL kamu setiap kali event yang kamu langgani terjadi. Kalau pengiriman gagal (non-2xx atau timeout), sistem coba ulang sampai 3 kali — dengan jeda 0 detik, 5 detik, dan 30 detik.
link.createdFired when a new link is createdlink.updatedFired when a link's URL or title is changedlink.archivedFired when a link is archivedlink.clickedFired on each redirect (per-click event)microsite.publishedFired when a microsite is publishedqr.scannedFired when a QR code is scannedSetiap POST webhook berisi body JSON dengan nama event, resource yang relevan, dan timestamp UTC.
{
"event": "link.created",
"link": {
"id": 123,
"short": "mylink",
"short_url": "https://s.id/mylink",
"long_url": "https://example.com/long-url",
"title": "My Link",
"created": "2026-06-22T10:00:00Z"
},
"timestamp": "2026-06-22T10:00:00Z"
}Setiap pengiriman menyertakan header X-SID-Signature: sha256=<hex>. Hitung HMAC-SHA256 dari body permintaan mentah pakai secret webhook kamu, lalu bandingkan pakai timing-safe comparison.
Node.js
const crypto = require('crypto');
function verifySignature(secret, rawBody, sigHeader) {
const expected = 'sha256=' +
crypto.createHmac('sha256', secret).update(rawBody).digest('hex');
return crypto.timingSafeEqual(
Buffer.from(sigHeader),
Buffer.from(expected),
);
}Go
func verifySignature(secret, body []byte, sig string) bool {
mac := hmac.New(sha256.New, secret)
mac.Write(body)
expected := "sha256=" + hex.EncodeToString(mac.Sum(nil))
return hmac.Equal([]byte(sig), []byte(expected))
}