QCoreAI sends signed POST requests to your URL for events like run.completed, agent.turn, and more. Secure with an HMAC-SHA256 secret — verified via the X-QCore-Signature header.
{ event, runId, sessionId, status, strategy, userInput, finalContent, totalCostUsd, finishedAt }. Respond with HTTP 2xx within 10s or the delivery is marked failed. You can retry failed deliveries from the Delivery log tab.