user.* and visit.* namespaces. They cover the user lifecycle, sessions, linked credentials, and passkey recovery.
For the shared event envelope, endpoint setup, retries, and signature verification, see Setting up webhooks and Event delivery & best practices. The current list of event types is always available from the event types endpoint.
User lifecycle
object
Occurs whenever two users are merged into one. Carries the surviving user and the merged-away user id.
Sessions and sign-in
object
Occurs whenever a user session is created. Is a
userSessionAndCredentials:
the
Session fields plus the user’s verifiedCredentials (wallets,
emails, phone numbers, social accounts) at session-create time, so consumers
can attribute the login without a follow-up API call.object
Occurs whenever a sign-in attempt fails.
Linked credentials
user.email.unlinked is emitted when an email credential is unlinked but is
not selectable in the event types catalog today.