Loading...
The page behind this dialog is live. Create a free account or sign in and you'll land right back on it.
Push ALAN events to your own HTTPS endpoints. ADVISOR-tier and above. Every payload is HMAC-SHA256 signed.
Receivers verify the signature by computing HMAC-SHA256(secret, <X-ALAN-Timestamp> + "." + body) and comparing to the X-ALAN-Signature header. Reject requests whose timestamp is more than 5 minutes off the current time, and de-duplicate on X-ALAN-Delivery-Id. Public docs with sample verifier code in TypeScript and Python ship in a follow-up.
Need a polling integration instead? Use API tokens with a cron on your side.