Webhooks

Register a webhook endpoint

Authenticated with an API key or dashboard session. The signingSecret is returned once at creation and is used to verify the HMAC-SHA256 X-Letmepost-Signature header on every delivery. An empty events array subscribes to every event type.

post/v1/webhook-endpoints

Request

  • Base URL: https://api.letmepost.dev
  • URL: https://api.letmepost.dev/v1/webhook-endpoints
  • Auth: HTTP bearer

Headers

Idempotency-Keystring
Example:post-launch-2026-05-15-001

Recommended on every write. Replays within 24 hours return the original response; conflicting bodies surface as 409 idempotency_conflict. See Idempotency.

Request body

urlstring uri required
eventsWebhookEventType[]

Empty array subscribes the endpoint to every event type.

descriptionstring

Example request

{
  "url": "https://hooks.example.com/letmepost"
}

Response

Endpoint created. signingSecret shown once.

idstring required
urlstring uri required
eventsWebhookEventType[] required
descriptionstring nullable
activeboolean required
lastDeliveryAtstring date-time nullable
lastFailureReasonstring nullable
createdAtstring date-time required
updatedAtstring date-time required
signingSecretstring required

HMAC-SHA256 signing secret — returned once at creation. Used to verify every delivery's X-Letmepost-Signature header.

Example response

{
  "signingSecret": "whsec_…"
}

Changes

No recorded changes to this operation across all 1 revision of this API.