Webhooks and an analytics endpoint land in the Charm API

Two additions for everyone building on the Charm API — and for everyone who would rather not build at all and just wire things up in Make, Zapier or n8n.

Webhooks: Charm calls you. Register a URL and Charm pushes loyalty events to it the moment they happen — no more polling the customer list on a schedule. Seven topics to start: points earned, points adjusted, reward redeemed, tier changed, tier approaching, store credit issued, and referral completed.

• Signed and verifiable — every delivery carries an HMAC-SHA256 signature keyed with a per-endpoint secret, so your server can prove it came from us
• Retried until it lands — failed deliveries back off and retry for about a day, and every retry keeps the same event id so duplicates are trivial to drop
• Managed over the API — create, list and delete endpoints with a key holding the new webhooks:manage scope

Analytics: one call, the whole picture. GET /v1/analytics/summary returns what the in-app dashboard computes — members, points earned and redeemed, attributed revenue, redemption rate, tier distribution, plus monthly revenue and enrollment series — for any window you ask for. It is also exposed as an MCP tool, so an AI assistant connected to Charm can answer "how did the program do last month?" without you opening the admin.

Both are documented in the API docs, and the OpenAPI spec at /api/v1/openapi.json already describes them.