Skip to main content
POST
cURL
Creates a new webhook subscription for the organization. The signing secret is returned only once in the response — store it securely for signature verification.

Authorizations

string
required
Send Bearer <token> in this header. The key needs webhooks:manage.

Body

string
required
string
required
Must use https:// and a public hostname. Bare IPs, private or loopback addresses, embedded credentials, names such as .local or .internal, and http:// are rejected.
string[]
required
Event types to subscribe to. Must include at least one. See Event types for all available events.
cURL
Returns the webhook endpoint ID and signing secret. The signing secret is only shown once.
This endpoint supports the Idempotency-Key header.