> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dynamic.xyz/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Auth webhooks

> Events emitted for users, sessions, sign-ins, linked credentials, and passkey recovery.

Auth events fire under the `user.*` and `visit.*` namespaces. They cover the user lifecycle, sessions, linked credentials, and passkey recovery.

For the shared event envelope, endpoint setup, retries, and signature verification, see [Setting up webhooks](/docs/platform/dashboard/webhooks/setup) and [Event delivery & best practices](/docs/platform/dashboard/webhooks/delivery-best-practices). The current list of event types is always available from the [event types endpoint](/docs/api-reference/events/get-event-types).

## User lifecycle

<ParamField body="user.created" type="object">
  Occurs whenever a user is created. Is a [user.](/docs/api-reference/schemas/User)
</ParamField>

<ParamField body="user.updated" type="object">
  Occurs whenever a user is updated. Is a [user.](/docs/api-reference/schemas/User)
</ParamField>

<ParamField body="user.deleted" type="object">
  Occurs whenever a user is deleted. Is a [user.](/docs/api-reference/schemas/User)
</ParamField>

<ParamField body="user.merged" type="object">
  Occurs whenever two users are merged into one. Carries the surviving user and the merged-away user id.
</ParamField>

<ParamField body="visit.created" type="object">
  Occurs whenever a visit is created. Is a
  [visit.](/docs/api-reference/schemas/Visitor)
</ParamField>

## Sessions and sign-in

<ParamField body="user.session.created" type="object">
  Occurs whenever a user session is created. Is a
  [userSessionAndCredentials](/docs/api-reference/schemas/UserSessionAndCredentials):
  the `Session` fields plus the user's `verifiedCredentials` (wallets,
  emails, phone numbers, social accounts) at session-create time, so consumers
  can attribute the login without a follow-up API call.
</ParamField>

<ParamField body="user.session.revoked" type="object">
  Occurs whenever a user session is revoked. Is a
  [session.](/docs/api-reference/schemas/Session)
</ParamField>

<ParamField body="user.signin.failed" type="object">
  Occurs whenever a sign-in attempt fails.
</ParamField>

## Linked credentials

<ParamField body="user.social.linked" type="object">
  Occurs whenever a user links a social account. Is a
  [provider.](/docs/api-reference/schemas/SocialSignInProvider)
</ParamField>

<ParamField body="user.social.unlinked" type="object">
  Occurs whenever a user unlinks a social account. Is a
  [provider.](/docs/api-reference/schemas/SocialSignInProvider)
</ParamField>

<ParamField body="user.passkeyRecovery.started" type="object">
  Occurs whenever a user started the passkey recovery process. Is a
  [wallet.](/docs/api-reference/schemas/Wallet)
</ParamField>

<ParamField body="user.passkeyRecovery.completed" type="object">
  Occurs whenever a user completed the passkey recovery process. Is a
  [wallet.](/docs/api-reference/schemas/Wallet)
</ParamField>

<Note>
  `user.email.unlinked` is emitted when an email credential is unlinked but is
  not selectable in the event types catalog today.
</Note>