---
title: "Register a signed webhook endpoint"
method: POST
path: "/v1/webhooks"
tags: ["Webhooks"]
---

# Register a signed webhook endpoint

`POST /v1/webhooks`

## Request

- Base URL: `https://ratchetgate.com`
- URL: `https://ratchetgate.com/v1/webhooks`
- Auth: HTTP bearer

Destinations must be https DNS hostnames on port 80/443. Private, loopback, and link-local addresses are refused both at registration and again at delivery time. Redirects are never followed. The signing secret is returned once.

## Request body

- object
  - `url` string, required
  - `events` string[], required

## Response `201`

Default Response

- object

## Other responses

- `400`: Invalid request.
- `401`: Missing or invalid API key.
- `402`: Insufficient prepaid credit.
- `403`: Scope, policy, or budget refusal.
- `404`: Not found.
- `409`: Conflicting state or idempotency-key reuse.
- `413`: Payload too large.
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/ratchetgate/apis/ratchet-api.md) · [All operations](https://skmtc.dev/ratchetgate/apis/ratchet-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ratchetgate/apis/ratchet-api/revisions/5712f33c692f?raw)