Outbound event subscriptions with HMAC-SHA256 signature verification. Inbound webhook receivers for CallRail, Resend, Twilio, and Stripe.
/api/v1/webhooksReturns all webhook endpoints registered for this organization.
/api/v1/webhooksSubscribe to one or more event types. We return a signing secret used for HMAC verification.
{
"url": "https://your-app.example.com/webhook",
"events": ["call.qualified", "lead.created"],
"description": "Production CRM bridge"
}/api/v1/webhooks/{id}Stops sending events to this endpoint immediately.
/api/v1/webhooks/{id}/rotate-secretReturns a new secret. The previous secret continues to work for 24 hours to allow zero-downtime rotation.
/api/v1/webhooks/{id}/deliveriesList the last 100 delivery attempts with status, response code, and latency.