Skip to main content
POST
Register a webhook endpoint. Requires webhooks:write.

Authorizations

Authorization
string
header
required

The access_token from the exchange endpoint.

Body

application/json
url
string<uri>
required

A public https:// URL (SSRF guard rejects localhost/private/internal hosts).

events
string[]

Event types to deliver (e.g. run.completed). OMIT to subscribe to ALL events; an explicit empty array is rejected with 422 (the empty set means "all", making [] ambiguous intent).

Minimum array length: 1

Response

Webhook created. The secret in this body is shown exactly once.

schema
string
required
Allowed value: "1.0"
webhook
object
required

The create projection — the webhook plus its one-time signing secret. Carries NO created_at/updated_at (the create RPC does not return them; GET the webhook for timestamps).