Webhooks

Create a scoped webhook subscription and reveal its signing secret once.

Owner/admin only. HTTPS destinations are DNS-resolved and SSRF-checked. Idempotency-Key makes creation retry-safe.

post/api/v1/webhook-subscriptions

Request

  • Base URL: https://commentary.dev
  • URL: https://commentary.dev/api/v1/webhook-subscriptions
  • Auth: HTTP bearer

Headers

Idempotency-Keystring required
X-Commentary-Workspace-Idstring

Must match the credential workspace. This header cannot widen grant authority.

X-Correlation-Idstring

Request body

endpointUrlstring uri required
eventTypesstring[] required

Response

Successful response.

object required

The data.secret field is displayed only in this response.

Changes

No recorded changes to this operation across all 1 revision of this API.