Skip to main content
POST
Create Webhook
Register a URL to receive real-time event notifications. The HMAC signing secret is returned once in the response. Save it immediately — you can’t retrieve it later.

Authentication


Request body

string
required
HTTPS endpoint URL that will receive webhook POSTs.
string[]
required
Event types to subscribe to. At least one required.
string
required
User-friendly name for this webhook.
string
Optional description.

Response

string
Webhook ID
string
HMAC-SHA256 signing secret. Shown once. Use this to verify X-Tuco-Signature on incoming webhooks.
string
Endpoint URL
string[]
Subscribed events
string
Webhook name
string
Creation timestamp (ISO UTC)
string
Reminder to save the secret

Examples

201 Response
Copy the secret from the response and store it securely (e.g. environment variable). This is the only time it’s returned. If you lose it, delete the webhook and create a new one.

Errors