Free AI outage & price alerts

Any https URL that isn’t a chat platform is a custom webhook: we POST the JSON below (or Slack / Discord / Teams-compatible payloads or plain text — see Payload format). Any 2xx counts as delivered; redirects are not followed, the timeout is 10 s, and private / reserved addresses are refused.

{
  "source": "modelbank.ai",
  "event": "outage",
  "title": "OpenAI is down",
  "text": "Real-traffic success rate 41% in the last 5 min…",
  "markdown": "…",
  "url": "https://modelbank.ai/status/openai",
  "level": "bad",
  "data": {
    "type": "outage",
    "service": "openai"
  },
  "ts": "2026-11-09T08:00:00.000Z"
}

Request headers

The receiver requires authentication (401 / 403)

Paste the key under Advanced → Auth token and we send Authorization: Bearer (values starting with “Bearer ”, “Basic ” or a full “Authorization: …” line are used as-is). Other headers such as X-Api-Key go under Other headers, one “Name: value” per line. All credentials are stored AES-256-GCM encrypted and only shown masked afterwards; user:pass@ in the URL becomes Basic auth.

If the test fails you see the receiver’s reason (e.g. “requires authentication” or “token rejected”). If the receiver is just temporarily down you can “Save anyway” and fix it later with Edit.

Verifying signatures

Set a random string only you know under Advanced → Signing secret and every request carries X-ModelBank-Timestamp and X-ModelBank-Signature. Compute over the raw body (don’t re-serialise the JSON) and reject timestamps older than 5 minutes to stop replays. For Feishu / DingTalk the secret is used with each platform’s own signing scheme.

// Node.js / Cloudflare Workers / Next.js route — verify X-ModelBank-Signature
import crypto from 'node:crypto'

export function verify(rawBody, headers, secret) {
  const ts = headers['x-modelbank-timestamp']
  const sig = headers['x-modelbank-signature'] || ''
  if (!ts || Math.abs(Date.now() / 1000 - Number(ts)) > 300) return false // reject replays older than 5 min
  const expected = 'sha256=' + crypto.createHmac('sha256', secret).update(ts + '.' + rawBody).digest('hex')
  return sig.length === expected.length && crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))
}

# Python (Flask / FastAPI) — use the raw request body, not re-serialised JSON
import hmac, hashlib, time

def verify(raw_body: bytes, headers, secret: str) -> bool:
    ts = headers.get('X-ModelBank-Timestamp', '')
    sig = headers.get('X-ModelBank-Signature', '')
    if not ts or abs(time.time() - int(ts)) > 300:
        return False
    mac = hmac.new(secret.encode(), ts.encode() + b'.' + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(sig, 'sha256=' + mac)