---
title: "Register business-management agent webhook"
method: POST
path: "/v1/owner/agents/{agent_id}/webhook"
tags: ["Business Owner"]
---

# Register business-management agent webhook

`POST /v1/owner/agents/{agent_id}/webhook`

## Request

- Base URL: `https://loppee.com`
- URL: `https://loppee.com/v1/owner/agents/{agent_id}/webhook`
- Auth: HTTP bearer

Human-owner-only recent-AAL2 registration of a provider-neutral HTTPS wake-up receiver for the one active management-agent credential. Loppee sends reference-only customer.message.created events; the receiver verifies the HMAC and uses its separately scoped Loppee API/MCP key to read or act. Re-registering replaces the endpoint and rotates the signing secret, which is returned once.

## Path parameters

- `agent_id` string, required

## Request body

- object
  - `url` string, uri, required: Public HTTPS receiver operated by the connecting principal or its agent runtime. Credentials in the URL and private-network destinations are rejected.

## Response `200`

Register business-management agent webhook response

- object
  - `status` 'registered' | 'rotated', required
  - `endpoint` object, required
    - `id` string, required
    - `connection_kind` 'consumer' | 'management' | 'team', required
    - `account_id` string, required
    - `credential_id` string, required
    - `business_id` string, nullable, required
    - `endpoint_url` string, uri, required
    - `event_types` string[], required
    - `enabled` boolean, required
    - `disabled_reason` string, nullable, required
    - `failure_count` integer, required
    - `last_delivery_at` string, date-time, nullable, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `signing_secret` string, required
  - `one_time_display` unknown, required
  - `delivery_contract` object, required
    - `version` 'loppee.webhook.v1', required
    - `authentication` 'hmac_sha256', required
    - `payload_mode` 'reference_only', required

## Other responses

- `400`: ErrorResponse
- `401`: ErrorResponse
- `403`: ErrorResponse
- `404`: ErrorResponse
- `409`: ErrorResponse
- `413`: ErrorResponse
- `429`: RateLimitError
- `default`: ErrorResponse

---

[API](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents.md) · [All operations](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/llms.txt) · [OpenAPI document](https://skmtc.dev/loppee/apis/loppee-business-registry-api-for-external-agents/revisions/37285f7cddcd?raw)