Webhooks

Create webhook

Creates an enabled webhook that sends the chosen post events to your endpoint. The response includes the signing_secret. The endpoint must be a public http or https URL: other schemes and private or local addresses are refused with 422 This endpoint is not allowed. on endpoint.

Each delivery is a JSON POST with the body {id, type, data, created_at} and the header X-Webhook-Signature: the hex HMAC-SHA256 of the raw body, keyed with the webhook's signing_secret. Compare it with your own HMAC of the body before trusting it. A delivery that does not get a 2xx answer within 10 seconds is retried twice, a minute apart. Redirects are not followed.

post/webhooks

Request

  • Base URL: https://app.trypost.it/api
  • URL: https://app.trypost.it/api/webhooks
  • Auth: HTTP bearer

Request body

endpointstring uri required
eventsWebhookEventType[] required

Response

The created webhook, with its signing secret.

idstring uuid
endpointstring uri
eventsWebhookEventType[]
status'enabled' | 'disabled' | 'paused'

paused is set by TryPost after 5 failed deliveries in a row (the account owner is emailed). Set status: enabled to resume.

last_sent_atstring date-time nullable

ISO 8601, UTC.

paused_atstring date-time nullable

ISO 8601, UTC.

consecutive_failuresinteger
signing_secretstring

Secret used to sign deliveries (whsec_ and 32 characters). Only returned when you create, get or rotate the webhook.

created_atstring date-time

ISO 8601, UTC.

updated_atstring date-time

ISO 8601, UTC.

Example response

{
  "last_sent_at": "2026-10-08T14:00:03+00:00",
  "signing_secret": "whsec_4qXbV8kP2mT7nR1sW9yZ3cE6hJ0aL5dF",
  "created_at": "2026-09-15T10:00:00+00:00",
  "updated_at": "2026-10-08T14:00:03+00:00"
}

Changes

No recorded changes to this operation across all 1 revision of this API.