---
title: "Create Webhook Subscription"
method: POST
path: "/api/v1/webhooks"
---

# Create Webhook Subscription

`POST /api/v1/webhooks`

## Request

- Base URL: `https://seminara.online`
- URL: `https://seminara.online/api/v1/webhooks`
- Auth: HTTP bearer

Creates a new outbound webhook endpoint with SSRF protection and generates an HMAC SHA-256 secret (whsec_...) for payload verification.

## Request body

- object
  - `url` string, uri, required: The destination URL to receive HTTPS POST event payloads.
  - `events` string[]: List of event types to subscribe to.
  - `description` string: Optional human-readable label for this subscription (e.g. HubSpot Sync).

## Response `201`

Webhook subscription created successfully. Contains the raw signing secret (shown only once).

- object
  - `subscription` WebhookSubscriptionWithSecret
    - `id` string, uuid
    - `url` string, uri
    - `secret` string: HMAC SHA-256 webhook signing secret for signature verification (returned only once at creation time).
    - `events` string[]
    - `is_active` boolean
    - `description` string, nullable
    - `created_at` string, date-time
  - `message` string

## Other responses

- `400`: Bad Request (e.g. invalid URL or private/SSRF restricted host).
- `401`: Unauthorized.

---

[API](https://skmtc.dev/seminara/apis/seminara-online-openapi-3-1-specification-rest-api-reference.md) · [All operations](https://skmtc.dev/seminara/apis/seminara-online-openapi-3-1-specification-rest-api-reference/llms.txt) · [OpenAPI document](https://skmtc.dev/seminara/apis/seminara-online-openapi-3-1-specification-rest-api-reference/revisions/3e030fb36cef?raw)