> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sparkles.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Receive an attributed sparkles event

> Sparkles sends one event object per request. Read the unmodified request bytes and reject Webhook-Timestamp values outside a five-minute tolerance. Decode the configured signing secret after removing whsec_, then compare HMAC-SHA256(Webhook-Id + "." + Webhook-Timestamp + "." + rawRequestBody) in constant time against each space-separated v1 signature. Webhook-Id equals the body UUID and is stable across retries and reconciliation. Return any 2xx only after durably accepting the event. Delivery is at least once; return 410 to disable the endpoint.



## OpenAPI

````yaml /openapi.json webhook partnerEvent
openapi: 3.1.0
info:
  title: Sparkles partner API
  version: 1.0.0
  description: Create promotional credit claims and receive attributed lifecycle events.
servers:
  - url: https://sparkles.dev
security: []
paths: {}

````