---
title: "Create an outbound webhook that receives POST with HMAC-SHA256 signature (header x-pymaia-signature) on selected events"
method: POST
path: "/api/v1/create_webhook"
tags: ["Automation"]
---

# Create an outbound webhook that receives POST with HMAC-SHA256 signature (header x-pymaia-signature) on selected events

`POST /api/v1/create_webhook`

## Request

- Base URL: `https://api.pymaia.com`
- URL: `https://api.pymaia.com/api/v1/create_webhook`
- Auth: HTTP bearer

Create an outbound webhook that receives POST with HMAC-SHA256 signature (header x-pymaia-signature) on selected events. Returns the signing secret once — store it securely.

## Request body

- object
  - `name` string, required
  - `url` string, uri, required
  - `events` string[]

## Response `200`

Tool executed successfully

- object
  - `ok` boolean
  - `result` unknown
  - `duration_ms` number

## Other responses

- `400`: Invalid params or handler error
- `401`: Missing or invalid Bearer token
- `403`: Missing required scope(s) (`denied_scope`), or the tool's module is disabled for the organization (`module_disabled`, with `why`, `fix` and `module`)
- `404`: Tool not found, internal-only, or excluded for OAuth connectors
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/pymaia/apis/pymaia-api.md) · [All operations](https://skmtc.dev/pymaia/apis/pymaia-api/llms.txt) · [OpenAPI document](https://skmtc.dev/pymaia/apis/pymaia-api/revisions/705a6973177b?raw)