Skip to main content

Register a new webhook subscription.

POST 
/public/v1/webhooks

Registers a webhook subscription for the calling consumer. Requires the webhooks:manage scope. The target URL is SSRF-guarded at registration: it must be https and must not resolve to loopback, private, link-local, or cloud-metadata addresses. The HMAC signing secret is returned ONCE in the response and is never retrievable again.

Request​

Responses​

The webhook was created. The secret field is present only in this response, so capture it now.

Response Headers
    Location

    Relative path of the created webhook subscription.