Webhooks

JobsPipe webhooks POST job events to your endpoint as they happen, so you don't poll. Webhooks are available on paid plans and are configured from the dashboard under Settings, where endpoint URLs are registered and signing secrets are issued and rotated. There is no public API for managing subscriptions.

Events

job.closed is the only event delivered today. A job.created event is planned but is not emitted yet, so do not subscribe to it expecting traffic - poll jobs search for new postings instead, as in Build a daily new-jobs feed.

The delivery body is JSON:

{
  "event": "job.closed",
  "id": "evt_01j8...",
  "timestamp": 1789999999,
  "data": { "id": "...", "job_title": "...", "company": "..." }
}

data carries the job fields in the same shape as the job schema.

Verifying signatures

Every delivery carries two headers:

Recompute the HMAC over the timestamp, a dot, and the raw request body, and compare in constant time. Reject deliveries whose timestamp is older than five minutes to guard against replay.

import { createHmac, timingSafeEqual } from "node:crypto";

function verify(rawBody: string, signature: string, timestamp: string, secret: string) {
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) return false;
  const expected = createHmac("sha256", secret)
    .update(`${timestamp}.${rawBody}`)
    .digest("hex");
  return (
    expected.length === signature.length &&
    timingSafeEqual(Buffer.from(expected), Buffer.from(signature))
  );
}

Delivery and retries

Respond with any 2xx within 5 seconds to acknowledge. Anything else - or a timeout - triggers retries with exponential backoff.

The full webhook contract also ships in the machine-readable OpenAPI specification under webhooks.