Webhook events

We may add new event types at any time. Ignore any event type your application does not recognize, and still respond with a 2xx status. You only receive the events you are subscribed to (see Event subscriptions).

Policy Non-Renewal

policy_non_renewal

Occurs approximately 75 days before expiration for a policy that will not be renewed. reason is a human-readable description of why the policy is not being renewed.

Renewal events (Renewal Solicitation Open, Policy Non-Renewal, and Quote Ready for renewal quotes) are available by enrollment. Contact api@corvusinsurance.com to enable them. These events are read-only notifications: renewal submission information cannot be changed through the API. To change it, contact the servicing underwriter.

{  "data": {    "brokerageId": "Yb3kP0aLQx2s8vN1dWqZeA",    "policyId": "HGQpZ_d-SjW9Hez-yXFAow",    "policyNumber": "CYB-123456-00",    "reason": "Score"  },  "timestamp": 1601414395,  "type": "policy_non_renewal"}

Payload envelope

{  "data": JSON Object,  "timestamp": Unix Timestamp,  "type": String}

Every event's data includes brokerageId.

See Subscribe and verify.

Verify the signature

X-CrowBar-Signature: t=1601414395,s=wGpXVnQVScPh5n7nS63z4MBSc6kCQuefjGNvJy86Fzw=

Take the signature after s=.
Compute an HMAC-SHA256 of the raw request body, keyed with your API key.
Compare. A match means the webhook came from Corvus.

Regenerating your API key changes the signing key immediately.

See Subscribe and verify.

Delivery and retries

Any 2xx acknowledges. Other statuses fail; redirects aren't followed.
15 s to connect, 15 s to respond.
Retried every 5 minutes, 10 attempts in total.
At-least-once and unordered. Make handlers idempotent and re-query the resource.
Events you aren't subscribed to are skipped, not retried.

See Delivery and retries.

Source IPs to allowlist

The full section is available to partners who are signed in to the Developer Portal.

Access is by invitation. To request it, email api@corvusinsurance.com.