# Webhook Events

Echo delivers real-time events to your registered HTTPS endpoint via HTTP POST, authenticated with HMAC-SHA256 signatures.
See [Onboarding & Registration](/echosync-webhooks/getting-started) for registration steps and [Receiving & Verifying Webhooks](/echosync-webhooks/technical-implementation) for signature verification, endpoint authentication, and best practices.

Version: 1.0.1

## Security

### hmacSignature

Echo uses HMAC-SHA256 signatures to authenticate webhook payloads. The signature is sent in the
`X-Echo-Hmac-SHA256` header and can be validated using your Signing Secret.
For detailed information on verifying signatures, see [Receiving & Verifying Webhooks](/echosync-webhooks/technical-implementation).

Type: http
Scheme: custom

### apiKey

Optional API key that can be provided during webhook registration. If provided, this key will be
included in the `x-api-key` header of all webhook requests.

Type: apiKey
In: header
Name: x-api-key

## Download OpenAPI description

 - [Webhook Events](https://echo-api.redocly.app/_bundle/echosync-webhooks/openapi.yaml)

## webhooks

 - [POST tracking-updates](https://echo-api.redocly.app/echosync-webhooks/openapi/webhooks/paths/tracking-updates/post.md): # Load Tracking / Status Updates - Geo-Location Tracking Events This webhook delivers real-time updates on shipment location and status information as freight moves through the supply chain. ## Load T
 - [POST available-loads](https://echo-api.redocly.app/echosync-webhooks/openapi/webhooks/paths/available-loads/post.md): # Available Load Notifications - Freight Opportunity Events This webhook delivers real-time notifications when loads become available for carriers to bid on or book. ## What are Available Load Notific