> ## Documentation Index
> Fetch the complete documentation index at: https://www.worldmonitor.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Chokepoint disruption alert outbound signed

> WorldMonitor POSTs this event to the `callbackUrl` you register via
RegisterWebhook whenever a subscribed chokepoint's disruption score
crosses your `alertThreshold`. Every delivery is signed so you can
confirm it genuinely came from WorldMonitor.

Verification: the `X-WM-Signature` header is
`sha256=<hex>`, where `<hex>` is the lowercase hex HMAC-SHA256 of the
exact raw request body, keyed by the `secret` returned when you
registered the webhook. To verify, recompute
`sha256=` + hex(HMAC_SHA256(key=secret, message=rawRequestBody)) over
the bytes exactly as received (do not re-serialize the JSON) and
compare against `X-WM-Signature` in constant time. Use the
`secret` string verbatim as the HMAC key — do not hex-decode it.
Reject the delivery if the signatures differ.

A verifiable signed sample (fixed secret + exact raw body +
resulting signature) is published at
https://www.worldmonitor.app/.well-known/webhook-sample.json so you
can confirm your HMAC verification end-to-end before registering.

Respond with any 2xx to acknowledge receipt; a non-2xx response or a
timeout marks the delivery failed. `X-WM-Delivery-Id` uniquely
identifies each delivery for idempotent processing.



## OpenAPI

````yaml /api/worldmonitor.openapi.yaml webhook chokepoint.disruption
openapi: 3.1.0
info:
  title: WorldMonitor API
  description: >-
    Unified OpenAPI bundle spanning all WorldMonitor services. Versioning and
    deprecation policy: https://www.worldmonitor.app/docs/api-versioning
  contact:
    name: WorldMonitor
    email: support@worldmonitor.app
  version: 1.0.0
servers:
  - url: https://api.worldmonitor.app
security:
  - WorldMonitorKey: []
  - ApiKeyHeader: []
paths: {}
components:
  securitySchemes:
    WorldMonitorKey:
      type: apiKey
      in: header
      name: X-WorldMonitor-Key
      description: User-issued WorldMonitor API key.
    ApiKeyHeader:
      type: apiKey
      in: header
      name: X-Api-Key
      description: Alias header for the WorldMonitor API key (X-WorldMonitor-Key).

````