POST/v1/webhook-endpoints

createWebhookEndpoint

Create a webhook endpoint. Registers an HTTPS endpoint for event deliveries. The URL is validated against SSRF at creation AND re-validated at every delivery (loopback, private-network, link-local, and cloud-metadata addresses are rejected — 400 `validation_failed`). The response includes the Standard-Webhooks signing secret exactly once. Endpoint creation counts against the plan's `integrations` quota.

Required scope:webhooks:write

Request body

urlstringrequired

HTTPS URL on the default port (443). Loopback, private, link-local, and cloud-metadata addresses are rejected — at creation AND at every delivery.

event_typesarray of "post.published" | "post.failed" | "channel.connected" | "channel.reauth_required" | "delivery.failed"required

Event types to subscribe to (at least one).

Depth-limited view — the interactive reference has every nested schema.

Responses

201WebhookEndpointCreated

The created endpoint with its show-once signing secret.

400invalid_requestvalidation_failed
401authentication_requiredinvalid_api_key
403insufficient_scopefeature_not_enabled
429rate_limitedquota_exhausted
500internal_error

Errors are RFC 9457 problem+json with a stable code and a request_id — each code above links to its own page.

Example

curl -X POST https://app.usepostify.com/v1/webhook-endpoints \
  -H "Authorization: Bearer postify_live_XXXXXXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{
  "url": "https://api.example.com/postify/webhooks",
  "event_types": [
    "post.published",
    "post.failed"
  ]
}'