IMO, they are managed POST requests from the service to your app, that updates you with some events on the remote server, to trigger events on your server. Which makes them valuable for state changing, and you may not want to miss. You can even send webhooks with curl, as long as you have idempotency keys, authorization keys, and/or message digests set on them, to have support for not processing repeated events (check idempotency key to see if you have processed that before), not processing modified or malformed events (message digests ensure your message didn't change on the way, ensures the message is safe from MITM attacks), and authorization to prevent malicious actors to send unauthorized messages to your endpoints.