Webhooks

Register an anomaly subscription with POST /v1/anomalies/subscribe; Forum Atlas POSTs matched anomalies to your URL signed with an X-Forum-Signature header (hex HMAC-SHA256 of the payload with your secret).

bash
curl -X POST https://api.forumatlas.com/v1/anomalies/subscribe \
  -H "Authorization: Bearer $FORUM_API_KEY" \
  -d '{
    "sectors": ["defense_aerospace"],
    "anomaly_types": ["regulator_vocabulary_shift", "atypical_ma_clustering"],
    "delivery_channels": ["webhook"],
    "webhook_url": "https://yourapp.example/forum-webhook",
    "webhook_secret": "at-least-24-characters-long-secret"
  }'

webhook_secret must be at least 24 characters when webhook is a delivery channel. Subscriptions are accepted and stored today; webhook delivery itself is in development — until it ships, use in_app delivery.