Troubleshooting Failed Webhook Deliveries & API Signature Verification

Diagnosing Failed Webhook Deliveries

If your webhook endpoint is not receiving real-time event feeds or deliveries show a failed status in Settings > Developer API:

1. HTTPS Requirement: Webhook endpoints must use valid SSL/TLS HTTPS URLs. Localhost and private intranet IP ranges are blocked by edge SSRF guards.
2. 10-Second Response Timeout: Your receiving server must return an HTTP 2xx status code within 10 seconds. Long-running tasks should be queued asynchronously on your backend.
3. Consecutive Failure Circuit Breaker: Subscriptions with repeated 5xx errors or timeouts are paused automatically to protect server resources. After fixing the endpoint, click Retry Delivery in the dashboard.

HMAC Signature Verification:

Validate the x-lgq-signature header using your webhook secret to confirm the payload originated from Let’s Get Quoted and was not tampered with in transit.