Create a webhook endpoint

POST 
/api/webhooks

Register a new endpoint. Admin only. The signing secret is AUTO-GENERATED (never client-supplied) and returned in the response. The URL must be a public https/http address — local, private, and reserved ranges are rejected (SSRF guard) with a 422.

Request

Responses

201

The created endpoint.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

422

The request failed validation.