Register a webhook endpoint

A prerequisite for every flow, and a step in none of them. Each sequence has at least one point where the next call is only correct after an event arrives.

Store the secret when it comes back. Rotation issues a second secret with an overlap window, so nothing is unverifiable mid-rotation.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
uri
required
event_types
array of strings
required
event_types*
Headers
uuid
required

Required on every state-changing POST, simulators included; the only exempt POST is …/verifications/preflight.
Replay (same key, same body) returns the original response with Idempotent-Replayed: true; same key with a
different body → 409 idempotency_conflict. Keys are UUIDs, scoped to the API key, retained for 24 hours.

Responses

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json