Important: The signing secret is returned once only in the response. Store it securely — it cannot be retrieved again. If lost, use POST /webhooks/{id}/rotate-secretto generate a new one.
curl --location '/webhooks' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
"name": "Production Booking Events",
"url": "https://your-system.example.com/webhooks/bls",
"events": [
"booking.created",
"booking.confirmed",
"booking.attendance_marked",
"booking.certificate_available"
],
"timeout_seconds": 10,
"is_active": true
}'{
"id": 7,
"name": "Production Booking Events",
"url": "https://your-system.example.com/webhooks/bls",
"events": [
"booking.created",
"booking.confirmed",
"booking.attendance_marked",
"booking.certificate_available"
],
"secret": "aBcDeFgHiJkLmNoPqRsTuVwXyZ012345678901234567890123456789012345",
"secret_prefix": "aBcDeFgHiJkL",
"is_active": true,
"created_at": "2026-06-03T18:00:00+00:00",
"notice": "Store the secret securely — it will not be shown again."
}