Developers
Integrate in an afternoon.
Three steps: get sandbox keys, send a signal, receive a signed webhook.
Three steps
01
Get sandbox keys
Fill in a short form. Keys come from our team, so you also meet a person.
02
Send a signal
Post the activity you already hold. Entrustt starts the quiet-period clock.
03
Receive a signed webhook
Verify the signature and act on each step.
curl. Placeholder endpoint
curl -X POST https://api.entrustt.example/v1/signals \
-H "Authorization: Bearer $ENTRUSTT_SANDBOX_KEY" \
-H "Content-Type: application/json" \
-d '{ "customer_ref": "cus_demo_123", "type": "login", "occurred_at": "2026-10-12T09:00:00Z" }'JavaScript. Placeholder endpoint
const res = await fetch("https://api.entrustt.example/v1/signals", {
method: "POST",
headers: {
Authorization: `Bearer ${process.env.ENTRUSTT_SANDBOX_KEY}`,
"Content-Type": "application/json",
},
body: JSON.stringify({ customer_ref: "cus_demo_123", type: "login", occurred_at: new Date().toISOString() }),
});Webhooks
Verify every event.
Each event has a timestamp and an HMAC-SHA256 signature. Verify the signature, and ignore an event ID you have already processed.
Example payload. Field names are placeholders.
POST /your-webhook-endpoint
Entrustt-Signature: t=1760000000,v1=5257a869...d8bd
Entrustt-Event-Id: evt_01HXAMPLE
{
"id": "evt_01HXAMPLE",
"type": "inactivity.grace_period_ended",
"created": 1760000000,
"data": {
"customer_ref": "cus_demo_123",
"status": "pending_review"
}
}