Webhooks send HTTP POST requests to your URL when events occur. Payloads are signed with HMAC-SHA256.