Skip to main content
POST
Create a webhook subscription

Authorizations

Authorization
string
header
required

API key passed as a Bearer token

Body

application/json
url
string<uri>
required

https endpoint that will receive event POSTs.

Required string length: 1 - 2083
name
string | null

Optional human-readable label to identify this webhook in lists/UI. Trimmed server-side; a blank value stores no name.

Maximum string length: 100
events
enum<string>[] | null

Event types to subscribe to (at least one). Preferred over event.

Webhook event types exposed to API clients.

Mirrors SynapseWebhookEventType enum in datalayer (camelCase) but rendered to clients as snake_case dotted strings (closer to Stripe convention and easier to grep in caller logs).

Available options:
scribe_session.created,
scribe_session.completed,
scribe_session.error,
scribe_session.updated,
scribe_session.cancelled,
scribe_session.deleted
event
enum<string> | null
deprecated

Deprecated: a single event type. Use events. When set and events is omitted, it is saved as a one-element events list.

Available options:
scribe_session.created,
scribe_session.completed,
scribe_session.error,
scribe_session.updated,
scribe_session.cancelled,
scribe_session.deleted

Response

Successful Response

Create response — carries the raw signing secret, shown exactly once.

id
string
required
url
string
required
events
enum<string>[]
required

Webhook event types exposed to API clients.

Mirrors SynapseWebhookEventType enum in datalayer (camelCase) but rendered to clients as snake_case dotted strings (closer to Stripe convention and easier to grep in caller logs).

Available options:
scribe_session.created,
scribe_session.completed,
scribe_session.error,
scribe_session.updated,
scribe_session.cancelled,
scribe_session.deleted
isActive
boolean
required
signingSecret
string
required

Raw HMAC signing secret. Shown once at creation — store it now; it is never retrievable again. Use it to verify the X-Scribe-Api-Signature header.

name
string | null

Optional human-readable label, or null if unset.

event
enum<string> | null
deprecated

Deprecated: the first subscribed event (events[0]). Use events.

Available options:
scribe_session.created,
scribe_session.completed,
scribe_session.error,
scribe_session.updated,
scribe_session.cancelled,
scribe_session.deleted
signingSecretPrefix
string | null

Display hint for the signing secret (e.g. 'whsec_a1b2c3d4'). The raw secret is only returned at creation/rotation.

signingSecretVersion
integer | null
createdAt
string | null
updatedAt
string | null
deletedAt
string | null