---
title: "Create webhook"
method: POST
path: "/webhooks"
tags: ["Webhooks"]
---

# Create webhook

`POST /webhooks`

Creates a webhook. The server generates the signing secret.

## Headers

- `Idempotency-Key` string, uuid

## Request body

- CreateWebhookRequest
  - `url` string, required
  - `events` WebhookEvent[], required
  - `enabled` boolean

## Response `201`

Created

- object
  - `data` Webhook, required
    - `id` string, uuid, required
    - `organizationId` string, uuid, required
    - `url` string, required
    - `secret` string, required — HMAC-SHA256 signing secret
    - `events` WebhookEvent[], required
    - `enabled` boolean, required
    - `deletedAt` number, nullable, required
    - `createdAt` number, required
  - `transactionId` string, uuid, required

## Other responses

- `400` — Bad request or validation error
- `401` — Authentication required
- `403` — Insufficient permissions
- `409` — Conflict (duplicate resource, in-use resource, or undo conflict)
- `429` — Rate limit exceeded
- `500` — Internal server error

---

[API](https://skmtc.net/voltairlabs/apis/voltair-api.md) · [All operations](https://skmtc.net/voltairlabs/apis/voltair-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voltairlabs/voltair-api/revisions/be08f4f706f5/schema)
