The outbound event catalog
GET/public/event_catalog
Every webhook event (lib/event_catalog.rb), in webhook order, with the v3 data fields and an
example envelope — the rows GET /webhook_events serves and the in-app
/developers/events page renders. live is "delivered
today". Throttle: public/catalogs/ip, 120 a minute.
Responses
- 200
- 429
The catalog.
Response Headers
Cached five minutes by browsers and CDNs. Every public response also carries Vary: Origin — its
CORS headers depend on the caller's origin — so a shared cache keys on it.
*, without credentials, for any origin but the ones the app itself is served from: a
https://<subdomain>.kudoscrm.com origin is echoed, with Access-Control-Allow-Credentials: true.
The apex https://kudoscrm.com gets *. No Origin header, no CORS headers.
A throttle refused the request. Wait Retry-After seconds — the time left in the refusing window
plus 0–3 s of jitter. The X-RateLimit-* headers describe the bucket that refused it.
Response Headers
Seconds until the window rolls.