Webhooks

Register a webhook endpoint

THE SECRET IS IN THIS ANSWER ONLY. Store it when you read it: we hold a verifier for it, not the value, and no route says it again. An endpoint whose secret was lost is rotated. The URL must be https on 443 and must not resolve inside our network; a URL that is not is a 422 invalid_url, and an event we do not fire is a 422 unknown_event. A key may subscribe only to events whose scope it holds. Idempotency-Key applies to the registration and not to the secret: a replay under the same key is a 409 idempotency_secret_not_replayable.

post/v1/webhook-endpoints

Request

  • Base URL: https://carbonguru.io
  • URL: https://carbonguru.io/v1/webhook-endpoints
  • Auth: HTTP bearer

Headers

Idempotency-Keystring

A key of the caller's choosing, held 24 hours and scoped to the account, the method and the path. The same key with the same body replays the stored response with Idempotent-Replayed: true. The same key with a different body is a 409 idempotency_key_reuse. A request still running under the key is a 409 idempotency_in_progress. A key longer than 255 characters or holding control characters is a 422. A write whose record cannot be stored is still processed once, without the replay guarantee. A response carrying a secret is never replayed: the second request receives a 409 idempotency_secret_not_replayable.

Request body

urlstring required

An https endpoint on port 443.

eventsstring[] required

catalog.push.completed, footprint.updated, order.offset, charge.failed, settlement.completed, certificate.issued, analysis.completed, analysis.failed.

Response

Registered. The secret is stated once, here.

secretstring required

The signing secret, whsec_… Standard Webhooks signing. It is never returned again.

Changes

No recorded changes to this operation across all 1 revision of this API.