Webhooks

Create a webhook

Workspace owner only, max 10 per workspace. Delivery starts from the CURRENT stream position (future events only). The signing secret (whsec_…) is returned ONCE in this response and never again; store it.

Verifying deliveries. Each POST carries X-Webhook-Timestamp (unix seconds) and X-Webhook-Signature: v1=<hex>, where the hex is HMAC-SHA256 of "<timestamp>.<raw body>" keyed with your secret. Recompute it over the RAW body, compare constant-time, and reject timestamps older than ~5 minutes. Delivery is at-least-once and ordered per webhook; dedupe on event.id. Respond 2xx quickly; anything else is retried with backoff (30s → 2m → 10m → 30m → hourly), and 20 consecutive failures disable the webhook.

post/workspaces/{workspaceId}/webhooks

Request

  • Base URL: https://tasg.app/api/v1
  • URL: https://tasg.app/api/v1/workspaces/{workspaceId}/webhooks
  • Auth: HTTP bearer

Path parameters

workspaceIdstring uuid required

Workspace id.

Request body

urlstring uri required

Public https(s) endpoint. Private/internal addresses are refused, and redirects are not followed.

descriptionstring
event_typesEventType[]

Omit (or send []) to receive every type.

Response

Created. Includes the secret; this is the only time.

Changes

No recorded changes to this operation across all 1 revision of this API.