Skip to main content
POST
Create Webhook
Creates a new webhook subscription for the organization. The signing secret is returned only once in the response — store it securely for signature verification. Permission: webhooks:manage

Request body

string
required
A human-readable name for the webhook (e.g. “Inventory Notifications”)
string
required
The HTTPS URL to receive webhook POST requests. Must use https:// and point to a public hostname (bare IPs, private/loopback addresses, and http:// are rejected).
string[]
required
Event types to subscribe to. Must include at least one. See the Webhooks guide for all available events.

Response

Returns the webhook ID and signing secret. The signing secret is only shown once.
Store the signingSecret securely. You will need it to verify webhook signatures. It cannot be retrieved after this response.