# Product low on inventory (/api/webhooks/product-low-inventory)

Webhook event `product:low_inventory`, sent as `POST` to your subscription's URL.

Fires when an order takes a product's inventory from above to at or below its low inventory level (the product's `low_quantity_notification`, or the account default in fulfillment settings). New accounts get an email subscription to this event by default. The body is an event object with the product in `data`.

## Parameters

- `X-Comecero-Signature` (header): Proof the delivery comes from Comecero and was not changed. It is the HMAC-SHA256 of the raw request body (UTF-8), keyed with the signature key as UTF-8, written as 64 lowercase hex characters. The key is the event subscription's `signature_key`, or the account's signature key (Settings, Technical) when the subscription has none. Every account gets one when it is created, so deliveries are signed unless the key was removed. To check it, compute the HMAC over the body exactly as received, before you parse it, and compare the two strings in constant time. Reject the delivery when they differ. The signature has no timestamp, so to guard against a replayed delivery also skip any `event_id` you already handled. If you cannot check signatures, use the event only as a hint: get the object by its id from the API before you act on it.
- `User-Agent` (header): Always `Comecero-Event (+https://comecero.com)`.

Responses: 200.

Full schemas: operation `event_product_low_inventory` in /openapi.json.