API reference

Webhooks

8 endpoints under /v1/webhooks.

List Endpoints

get/v1/webhooks

List the org's registered webhook endpoints.

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Create Endpoint

post/v1/webhooks

Register a webhook endpoint and mint a signing secret. The secret appears only in this response; use /rotate to replace it. Each event type must map to a registered OperationSpec with customer webhook visibility. Unknown types return 400 webhook_event_unknown; platform-internal types return 403 webhook_event_not_subscribable. The synthetic webhook.test event is always accepted.

Headers

  • X-Organization-IDstringoptional

Request body

  • urlstring (uri)required
  • events_subscribedstring[]required
  • descriptionstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Read Endpoint

get/v1/webhooks/{endpoint_id}

Read a single endpoint's metadata.

Path parameters

  • endpoint_idstring (uuid)required

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Delete Endpoint

delete/v1/webhooks/{endpoint_id}

Delete an endpoint. Cascade clears its delivery audit.

Path parameters

  • endpoint_idstring (uuid)required

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

List Deliveries

get/v1/webhooks/{endpoint_id}/deliveries

List recent deliveries for the endpoint, newest first. Exposes the dispatcher's audit: HTTP status, response preview and retry schedule.

Path parameters

  • endpoint_idstring (uuid)required

Query parameters

  • limitintegeroptional
  • offsetintegeroptional

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Get Webhook Diagnostics

get/v1/webhooks/{endpoint_id}/diagnostics

Composite delivery-health diagnostic for a single webhook endpoint. Counts cover the 500 most recent deliveries. Deviations are typed so the SDK and frontend can branch on them.

Path parameters

  • endpoint_idstring (uuid)required

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Rotate Endpoint

post/v1/webhooks/{endpoint_id}/rotate

Rotate the signing secret. Returns the new secret once. Deliveries enqueued after rotation sign with the new secret; in-flight deliveries already in the dispatcher's batch may still sign with the old one. Receivers should accept both for a brief grace window.

Path parameters

  • endpoint_idstring (uuid)required

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response

Test Endpoint

post/v1/webhooks/{endpoint_id}/test

Fire a synthetic test event at the endpoint. Poll GET /v1/webhooks/{id}/deliveries for the outcome. Test events follow the same retry and DLQ semantics as production events.

Path parameters

  • endpoint_idstring (uuid)required

Headers

  • X-Organization-IDstringoptional

Failures return the error envelope; branch on error_code.

Request
Response