Lettermint email event webhook

POST

/api/v1/webhooks/lettermint

const url = 'https://api.deploybase.eu/api/v1/api/v1/webhooks/lettermint';
const options = {method: 'POST', headers: {'X-Lettermint-Signature': 'example'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.deploybase.eu/api/v1/api/v1/webhooks/lettermint \
  --header 'X-Lettermint-Signature: example'

Receives bounce and spam-complaint events from Lettermint and suppresses the affected addresses. Public route with no auth middleware: the HMAC-SHA256 signature in X-Lettermint-Signature, verified over the raw body, is the only gate. Not called by clients.

Parameters

Header Parameters

X-Lettermint-Signature

required

string

HMAC signature, format t={timestamp},v1={hex}

X-Lettermint-Delivery

string

Unix timestamp of the delivery, cross-checked against the signature

Responses

200

Event processed, or deliberately ignored

application/json

400

Body could not be read or parsed

application/json

401

Signature missing, invalid, or outside the tolerance window

application/json

500

Processing failed — Lettermint should retry

application/json