---
title: "Where events are posted"
method: PUT
path: "/api/v1/watch/webhook"
---

# Where events are posted

`PUT /api/v1/watch/webhook`

## Request

- Base URL: `https://meetkatalis.com`
- URL: `https://meetkatalis.com/api/v1/watch/webhook`
- Auth: API key in header `x-api-key`

Free. A public https address. The signing secret comes back once. Each delivery is a JSON body of the form { "events": [ ... ] } with the header X-Katalis-Signature "t=<unix seconds>,v1=<hex HMAC-SHA256 of '<t>.<raw body>' with the secret>"; answer 2xx within 10 seconds, or it's retried five times over two days.

## Request body

- object
  - `url` string, uri, required

## Response `200`

url, active, secret (once), verify (how to check the signature, with a worked example)

## Other responses

- `400`: Not a public https address

---

[API](https://skmtc.dev/meetkatalis/apis/katalis-uk-business-intelligence-apis.md) · [All operations](https://skmtc.dev/meetkatalis/apis/katalis-uk-business-intelligence-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/meetkatalis/apis/katalis-uk-business-intelligence-apis/revisions/214b13088f95?raw)