Monitor

Notification settings

Enable or disable alerts per project. Toggle email, wire an outbound webhook, or set per-channel minimum severities. Settings changes require the project-settings admin secret — it is prompted once and stored in this session only.

Email alerts

One email per flagged dependency. The unsubscribe link at the bottom of every alert email flips this switch to muted without needing the admin secret.

Outbound webhooks

HTTP POST a signed JSON payload to your listener. Each delivery signs the body with HMAC-SHA256 keyed by the app's webhook secret; receivers verify via X-CrateSentinel-Signature.

Severity routing

Each channel reaches you at the severity you set or higher. Email defaults to LOW; webhook defaults to HIGH to avoid alert spam.