Register a webhook endpoint
Registers a webhook endpoint. The signing secret is returned ONCE in this response and never again — store it to verify the X-Webhook-Signature (sha256) header on delivered events.
POST
Authorizations
OAuth 2.0 with opaque bearer tokens. Authorization-code requests require PKCE S256.
Headers
Pin a dated API release (YYYY-MM-DD). Omit for the latest (2026-06-09). Unknown values return 400 unsupported_api_version; the resolved version is echoed back in the X-API-Version response header.
Pattern:
^\d{4}-\d{2}-\d{2}$Example:
"2026-06-09"
Body
application/json
The body is of type any.
Response
Webhook endpoint created.