curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.computer.stateset.app/api/v1/webhooks' \
--header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY" \
--header 'Content-Type: application/json' \
--data '{
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
]
}'
{
"id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
],
"is_active": true,
"created_at": "2026-08-31T14:22:05Z",
"updated_at": "2026-08-31T14:22:05Z",
"secret": "YOUR_API_KEY"
}
Create Webhook Endpoint V1
Register a durable webhook endpoint. Returns the signing secret exactly once on creation. Subsequent reads omit it…
POST
/
api
/
v1
/
webhooks
curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.computer.stateset.app/api/v1/webhooks' \
--header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY" \
--header 'Content-Type: application/json' \
--data '{
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
]
}'
{
"id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
],
"is_active": true,
"created_at": "2026-08-31T14:22:05Z",
"updated_at": "2026-08-31T14:22:05Z",
"secret": "YOUR_API_KEY"
}
Confirm your deployment before running this request. This page describes an API contract;
a published reference does not establish hosted availability. Check the dated
host report and obtain your deployment URL and credentials.
Replace the example host if your provisioned service uses a different URL.
POST /webhooks/{id}/rotate-secret — it preserves the delivery
history and only changes the signing secret.
Request body
CreateWebhookEndpointRequest
string
required
Receiver URL. Must start with http:// or https://; ≤2048 chars.
string[]
Events to subscribe to. Either explicit names (‘job.completed’, ‘job.failed’) or ’*’ for all.
Response
WebhookEndpointWithSecret
string
required
string
required
string[]
required
boolean
required
string
required
string
required
string
required
HMAC-SHA256 signing secret. Compare incoming X-Webhook-Signature against
HMAC(secret, f'{t}.{body}').Status codes
| Code | Meaning |
|---|---|
201 | Successful Response |
422 | Validation Error |
Using this contract
Read the source OpenAPI document for declared schemas and alternatives. This page also includes documented corrections from the spec overlays. Example IDs and values are illustrative; replace them with records from your workspace.curl --silent --show-error --fail-with-body --request POST \
--url 'https://api.computer.stateset.app/api/v1/webhooks' \
--header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY" \
--header 'Content-Type: application/json' \
--data '{
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
]
}'
{
"id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
"url": "https://example.com/webhooks/stateset",
"events": [
"string"
],
"is_active": true,
"created_at": "2026-08-31T14:22:05Z",
"updated_at": "2026-08-31T14:22:05Z",
"secret": "YOUR_API_KEY"
}
Last modified on September 21, 2026