UptimePad sends a single POST request per state change with a stable JSON schema. Every payload includes the monitor identity, the incident timeline position (started, ongoing, recovered), affected regions, and the HTTP result that triggered the incident.
{
"event": "monitor.down",
"monitor": {
"id": "mon_4a7c8e",
"name": "checkout.acme.com",
"url": "https://checkout.acme.com/health"
},
"incident": {
"id": "inc_91a2",
"started_at": "2026-05-03T14:22:18Z",
"regions_affected": ["North America", "Europe"],
"diagnostic_summary": "5xx response, 502 Bad Gateway"
},
"delivery": {
"id": "wh_8f3d1",
"attempt": 1,
"signature": "sha256=…"
}
}The delivery.signature header is an HMAC-SHA256 signature of the body, signed with your endpoint secret. Verify it before trusting the payload. The signing secret is per-endpoint, not per-account, so you can rotate one without breaking the others.