Webhooks

Your endpoints, the event stream, and catch-up after an outage.

📄️Create a webhook endpoint

Returns the signing secret in this response and nowhere else. Rotation is DELETE then POST: while no endpoint is ACTIVE, events are still logged and remain retrievable, but they are not pushed.

📄️Get all your webhook endpoints

Signing secrets are NEVER returned here, or anywhere after registration — the create response is the only place one is shown.

📄️Pause a webhook endpoint

A PAUSED endpoint keeps its URL claim and its secret. Resume needs neither.

📄️Resume a webhook endpoint

Resume a webhook endpoint

📄️Delete a webhook endpoint

The row is kept so past deliveries stay readable, but the URL is released — which is how you rotate a secret onto the same URL.

📄️Get all events since a cursor

Returns events in sequence order after `since`. The sequence is gap-free, so a page boundary can never hide an event. `nextCursor` is null once you are caught up — poll on a schedule rather than only after an incident, because a failed push is never retried.

📄️Get an event by its id

Get an event by its id

📄️Resend an event

Queues one more attempt, signed afresh. Not a retry — retries do not exist — so asking twice while one is pending is refused rather than queued.