SDK — @eventyvo/embed
Honest scope — hosted embed loader for browsers; npm helper for webhook HMAC only.
What ships today
| Capability | How |
|---|---|
| Embeds on your site | Hosted script https://docs.eventyvo.com/embed/v1/eventyvo-embed.js — no npm required |
| Webhook HMAC verify | Optional npm package @eventyvo/embed → verifyWebhookSignature |
| Connect REST client | Not in the SDK — call https://api.eventyvo.com from your server with X-API-KEY |
There is no browser SDK that embeds your API key, and no full TypeScript REST client published as @eventyvo/embed.
Install (webhook helper)
npm install @eventyvo/embed
import { verifyWebhookSignature } from "@eventyvo/embed";
const valid = verifyWebhookSignature({
payload: rawBody,
secret: process.env.WEBHOOK_SECRET!,
signature: headers["x-eventyvo-signature"],
timestamp: headers["x-eventyvo-timestamp"],
});
Verify on the raw body string before JSON.parse. Details: Webhook verification.
Embed script (recommended)
<div data-eventyvo="event-card" data-event-slug="my-event" data-theme="light"></div>
<script async src="https://docs.eventyvo.com/embed/v1/eventyvo-embed.js"></script>
See Embeds overview and CMS recipes.