Webhooks

Register and manage webhook subscriptions (scope webhooks:manage).

List the calling consumer's webhook subscriptions.

Returns the consumer's own webhook subscriptions. Requires the `webhooks:manage` scope. The signing secret is never returned after creation.

Register a new webhook subscription.

Registers a webhook subscription for the calling consumer. Requires the `webhooks:manage` scope. The target URL is SSRF-guarded at registration: it must be https and must not resolve to loopback, private, link-local, or cloud-metadata addresses. The HMAC signing secret is returned ONCE in the response and is never retrievable again.

Delete a webhook subscription.

Deletes one of the calling consumer's webhook subscriptions. Requires the `webhooks:manage` scope. Returns 404 (not 403) when the id is not one of the caller's own subscriptions.

List recent delivery attempts for a webhook subscription.

Returns up to 50 recent delivery attempts (most recent first) for one of the calling consumer's own webhook subscriptions. Requires the `webhooks:manage` scope. Returns 404 (not 403) when the id is not one of the caller's own subscriptions. Delivery records carry no secret.