secret which is only shown once at creation — store it securely for verifying webhook signatures.Authorization: Bearer ********************{
"url": "https://your-app.com/webhooks/references",
"events": [
"reference.submitted",
"reference.declined",
"reference.all_completed"
],
"timeout_seconds": 30,
"max_retries": 3
}curl --location --request POST '/webhooks' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"url": "https://your-app.com/webhooks/references",
"events": [
"reference.submitted",
"reference.declined",
"reference.all_completed"
],
"timeout_seconds": 30,
"max_retries": 3
}'{
"data": {
"id": 0,
"url": "http://example.com",
"events": [
"string"
],
"is_active": true,
"timeout_seconds": 0,
"max_retries": 0,
"failure_count": 0,
"last_called_at": "2019-08-24T14:15:22.123Z",
"last_failed_at": "2019-08-24T14:15:22.123Z",
"created_at": "2019-08-24T14:15:22.123Z"
},
"secret": "string",
"message": "string"
}