Create endpoint
Register a webhook endpoint (201). The response carries the signing secret ONCE.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
https://…, publicly resolvable. Rejected otherwise.
Free-text label for humans reading the settings list.
Event types to receive. Omit or leave empty for ALL of them.
Raw uuid of the Space to scope deliveries to. Omit for org-wide (every Space).
Response
The endpoint, with its signing secret (shown once)
A freshly created endpoint. secret appears HERE and nowhere else, ever.
Empty = every event type.
Consecutive failed delivery attempts since the last success.
whe_<uuid>.
Discriminator for polymorphic SDK decoders. Always "webhook_endpoint".
The signing key, whsec_…. Store it now: it is not recoverable, and rotation means creating
a new endpoint.
A clamped failure summary — a status code or transport class, never a response body.
null = org-wide.