Create a webhook endpoint
Register a URL to receive webhook notifications for selected event types.
* for all events). The response includes a secret starting with whsec_; store it immediately, as it cannot be retrieved later.
URLs are validated at creation time. The hostname must resolve to a public IP address. Private ranges, loopback addresses, and reserved hostnames (localhost, *.local, *.internal) are rejected.
Authorizations
API key passed in the X-API-Key header.
Body
Endpoint configuration
Event types to subscribe to (use * for all)
1["balance.credited", "balance.debited"]HTTPS URL that will receive webhook deliveries
1"https://example.com/webhooks"
Human-readable label for this endpoint
"Production webhook receiver"
Arbitrary key-value metadata to attach to this endpoint
Response
Endpoint created (includes secret)
When set and in the future, the circuit breaker has paused deliveries to this endpoint until this time (sustained delivery failures)
"2026-01-15T10:40:00Z"
When the endpoint was created
"2026-01-15T10:30:00Z"
Human-readable label
"Production webhook receiver"
Subscribed event types
["balance.credited", "balance.debited"]Endpoint ID
"550e8400-e29b-41d4-a716-446655440000"
Arbitrary metadata
When set and in the future, 429 rate-limit backoff has paused deliveries to this endpoint until this time
"2026-01-15T10:35:00Z"
Signing secret (only returned on create and rotate — store it immediately)
"whsec_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2"
Lifecycle status: ACTIVE, DISABLED, or ARCHIVED
"ACTIVE"
When the endpoint was last modified
"2026-01-15T10:30:00Z"
Destination URL for deliveries
"https://example.com/webhooks"