Skip to main content
POST
Create Webhook Endpoint

Authorizations

X-API-Key
string
header
required

Body

application/json
event_types
string[]
required

Event types to deliver. Employee/person: employee.changed, employee.deleted, person.changed — a change to identity fields (name, IIN) emits ONLY person.changed (subscribe to it to receive renames), while employee.changed covers employment attributes (department, position, status). Document lifecycle: document.sent, document.approval_started, document.signing_started, document.completed, document.rejected, document.revoked, document.change_requested, document.deleted. Employee/person payloads carry {employee_id}; document payloads carry {document_id}. Refetch the resource with your own key. Note: document events are delivered for every document in the tenant regardless of the endpoint owner's per-document permissions — payloads reveal a document's id and lifecycle timing (never its content; GetDocument still enforces access). Do not subscribe if the mere existence or timing of confidential documents must stay hidden from the endpoint owner.

url
string
required

Delivery target. Must be https. A host that resolves to a private or loopback address is accepted here but blocked at delivery time, so every attempt would fail.

Response

OK

endpoint
object

The created endpoint.

secret
string
read-only

Signing secret. Shown once — store it to verify delivery signatures.