Skip to main content
POST
Register a durable webhook endpoint. Returns the signing secret exactly once on creation. Subsequent reads omit it; if you lose it or want to roll a leaked secret, call POST /webhooks/{id}/rotate-secret — it preserves the delivery history and only changes the signing secret.

Request body

CreateWebhookEndpointRequest
string
required
Receiver URL. Must start with http:// or https://; ≤2048 chars.
string[]
Events to subscribe to. Either explicit names (‘job.completed’, ‘job.failed’) or ’*’ for all.

Response

WebhookEndpointWithSecret
string
required
string
required
string[]
required
boolean
required
string
required
string
required
string
required
HMAC-SHA256 signing secret. Compare incoming X-Webhook-Signature against HMAC(secret, f'{t}.{body}').

Status codes