Head to head · Sending webhooks · October 2026 research run

Amazon EventBridge vs Convoy

Amazon EventBridge scores 73.7 (BB) on agent readiness against Convoy's 62.2 (B), and leads in 5 of 7 scored categories. Convoy leads on reliability and maintenance & community. Both do sending webhooks.

Best webhook and event delivery infrastructure for AI agents · All 48 webhooks comparisons

Which one, for what

Amazon EventBridge BB

Good for Teams already on AWS that want events routed between AWS services, their own code and outside HTTPS endpoints under IAM, with retention and replay on the bus.

Ahead on

  • Security & auth, 88 against 53
  • Payments & pricing, 35 against 30
  • Transparency & trust, 87 against 67

Also in its favour

  • Agent-ready, a grade of BB or better
  • A hosted endpoint, with nothing to install
  • No incidents deducted, where Convoy loses 6 points for them

Watch for

Classic PutEvents has no idempotency token or deduplication, and failed entries come back inside a successful response for the caller to resend

Convoy B

Good for A product that has to send signed webhooks to its customers' endpoints with retries, replay and a delivery log, or receive third-party webhooks and route them inward.

Ahead on

  • Reliability, 92 against 73
  • Maintenance & community, 80 against 75

Also in its favour

  • Free to start without a card

Watch for

Advisory GHSA-p5vg-v7mj-f6q4 (24 July 2026, High) let a caller on one project read another project's source and broker credentials before v26.6.8

Score by category

CategoryWeight this runAmazon EventBridgeConvoyEdge
Reliability16%207392Convoy +19
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28278Amazon EventBridge +4
Agent ergonomics13%16.27369Amazon EventBridge +4
Security & auth14%17.58853Amazon EventBridge +35
Payments & pricing10%12.53530Amazon EventBridge +5
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87580Convoy +5
Transparency & trust7%8.88767Amazon EventBridge +20
Negative events≤150-6
Total73.7 · BB62.2 · B

Facts side by side

FactAmazon EventBridgeConvoy
KindHTTP APIHTTP API
VendorAmazon Web ServicesFrain Technologies Inc.
Hosted endpointhttps://events.us-east-1.amazonaws.comno (local only)
TransportsHTTPHTTP
AuthOAuth or keyAPI key
PricingPay per usePaid
x402nono
LicenceProprietary service under the AWS Customer Agreement. The AWS SDKs, the API models and the agent toolkit skill are Apache-2.0Elastic Licence 2.0 for the gateway (source available, not an OSI licence). The convoy.js SDK is MIT per npm. Convoy Cloud is a proprietary hosted service under Convoy's terms of use
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-242026-09-27
Terms last updated2026-08-14
Privacy policy last updated2026-05-182023-06-01
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingnot found in the text
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity3.2M npm/wk2.9k stars, 2.3k npm/wk, 679 PyPI/wk

Verdicts

Amazon EventBridge

IAM policies scope a credential to single actions and buses, and an SLA commits 99.99 per cent monthly uptime per Region. The Custom Event Bus API of 24 September 2026 adds retention, replay, ordering and publish-time deduplication. Classic PutEvents takes no idempotency token and answers 200 for a bus that does not exist. A person must open the AWS account.

Convoy

Convoy Cloud runs the same HTTP API as the self-hosted gateway, with a public OpenAPI spec of 68 operations, project-scoped keys, idempotency keys on events and replay endpoints. Two credential exposures were fixed in July and August 2026, one published as a high-severity advisory. Cloud access needs a browser signup, and the trial allows 100 events a day.

Before you call either

Amazon EventBridge

  1. Use aws eventsv2 and the EventBridgeV2 SDK client for the Custom Event Bus, but write IAM actions with the events: prefix. A policy naming eventsv2: grants nothing
  2. After a Classic PutEvents call, check FailedEntryCount and each entry's ErrorCode, then resend failed entries yourself. A request holds up to 10 entries and under 1 MB
  3. Set SystemMetadata.DeduplicationId on Custom Event Bus entries when retrying a publish, and treat a SuccessCode of DEDUPLICATED as success
  4. Set RetryPolicy and OnFailureConfiguration when creating a subscriber. The defaults stop after 5 attempts or 300 seconds, and an exhausted event is dropped
  5. Store the full bus ARN. A Custom Event Bus ARN ends in a generated identifier that changes when a bus of the same name is recreated

Convoy

  1. Use the regional base URL, https://us.getconvoy.cloud/api/v1 or https://eu.getconvoy.cloud/api/v1. A project key works only under /projects/{projectID}/
  2. Create an endpoint, then a subscription, then the event. An event sent to an endpoint with no subscription isn't dispatched
  3. Send idempotency_key on every event. A repeated key creates the event but no delivery, and the key stays reserved until retention deletes the event
  4. Create projects with a personal API key and the orgID query parameter. The project key in that response is shown once
  5. Before retrying an endpoint or subscription create, list endpoints by ownerId. Idempotency keys cover event ingestion only

Questions

Which is better for AI agents, Amazon EventBridge or Convoy?

Amazon EventBridge scores 73.7 (BB) on agent readiness against Convoy's 62.2 (B), and leads in 5 of 7 scored categories. Convoy leads on reliability and maintenance & community.

Do Amazon EventBridge and Convoy need an API key?

Amazon EventBridge takes an API key or an OAuth sign-in. Convoy needs an API key.

Can an agent call Amazon EventBridge and Convoy without installing anything?

Amazon EventBridge has a hosted endpoint at https://events.us-east-1.amazonaws.com. No hosted endpoint is listed for Convoy.

Other comparisons with Amazon EventBridge or Convoy

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.