---
title: "Register a webhook endpoint (Syndicate Alpha)"
method: POST
path: "/daas/webhooks"
tags: ["Account"]
---

# Register a webhook endpoint (Syndicate Alpha)

`POST /daas/webhooks`

## Request

- Base URL: `https://api.playcallerapp.com`
- URL: `https://api.playcallerapp.com/daas/webhooks`
- Auth: API key in header `X-PlayCaller-Key`

Register an HTTPS endpoint to receive signed webhook deliveries for one or more event types. Returns a one-time secret for HMAC-SHA256 signature verification (`X-PlayCaller-Signature`).

**Tier access:** Syndicate Alpha

## Request body

- object
  - `url` string, uri, required
  - `events` string[], required

## Response `201`

Webhook registered. Secret shown once.

- object
  - `success` boolean
  - `data` object
    - `id` string, uuid
    - `url` string
    - `events` string[]
    - `secret` string: HMAC secret — store securely, not shown again
    - `created_at` string, date-time

## Other responses

- `401`: Missing or invalid API key
- `403`: Syndicate Alpha key required
- `429`: Rate limit or monthly quota exceeded
- `500`: Internal server error

---

[API](https://skmtc.dev/playcallerapp/apis/playcaller-data-api.md) · [All operations](https://skmtc.dev/playcallerapp/apis/playcaller-data-api/llms.txt) · [OpenAPI document](https://skmtc.dev/playcallerapp/apis/playcaller-data-api/revisions/100c0a3ffbfe?raw)