---
title: "Send a signed test webhook"
method: POST
path: "/watchlist/webhooks/test"
tags: ["Watchlist"]
---

# Send a signed test webhook

`POST /watchlist/webhooks/test`

## Request

- Base URL: `https://api.companystack.co.uk`
- URL: `https://api.companystack.co.uk/watchlist/webhooks/test`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`

Send one signed test delivery to `url`, so you can check your endpoint and its signature verification before relying on it. The reply reports what your endpoint answered: 502 when it did not return 2xx.

## Request body

- object
  - `url` string, uri

## Response `200`

Delivered (2xx from your endpoint)

## Other responses

- `400`: URL not allowed
- `401`: API key missing, malformed or revoked
- `403`: The key's plan does not include this endpoint (`code: plan_upgrade_required`, with `upgrade_url`), the key may not call it, or the key is beyond the plan's key limit after a downgrade (`code: key_limit_exceeded`: the newest keys are paused until keys are deleted or the plan upgraded)
- `429`: Per-minute or per-day limit reached (`code: rate_limited`, `window: minute|day`). Wait `Retry-After` seconds; when both windows are full the day is reported. A refused request does not count against either limit. A bulk lookup (`POST /company/bulk`) counts each company number in it as one request, so one that is more than you have left is refused whole, and the body adds `requested` and `fits`.
- `502`: Your endpoint did not return 2xx

---

[API](https://skmtc.dev/companystack/apis/companystack-api.md) · [All operations](https://skmtc.dev/companystack/apis/companystack-api/llms.txt) · [OpenAPI document](https://skmtc.dev/companystack/apis/companystack-api/revisions/8f3234237d2d?raw)