Skip to main content
POST
Register a webhook endpoint
Create a receiver. The signing secret is shown once. Registration is live. Delivery is near-term. See webhooks.

Authorizations

Authorization
string
header
required

OAuth 2.1 authorization code with PKCE. Implicit and password flows are unsupported.

Headers

Idempotency-Key
string
required

Required for mutating requests. Replays with the same key and payload hash return the original logical result; replays with a different payload hash return 409.

Required string length: 16 - 255

Body

application/json
url
string<uri>
required
enabled_events
enum<string>[]
required
Minimum array length: 1
Available options:
event.processed,
event.failed,
consent.revoked,
profile.updated

Response

Webhook endpoint registered. The signing secret is shown once.

endpoint
object
required
signing_secret
string
required

One-time webhook HMAC signing secret.