Register a webhook endpoint. The signing secret is returned exactly once.
Event types to deliver; omit for all.
Created
Masked; the full secret is returned once at creation.