Skip to main content
POST
Create webhook

Authorizations

X-Auth-Token
string
header
required

API token generated at Settings > API

Body

application/json
url
string<uri>
required

HTTPS endpoint URL

events
enum<string>[]

Events to subscribe to (empty = all events)

Available options:
template.created,
template.updated,
template.archived,
submission.created,
submission.completed,
submission.archived,
form.created,
form.started,
form.completed,
form.declined,
signing.complete
enabled
boolean
default:true

Response

Webhook created (includes secret_key)

id
integer
url
string<uri>
events
enum<string>[]
Available options:
template.created,
template.updated,
template.archived,
submission.created,
submission.completed,
submission.archived,
form.created,
form.started,
form.completed,
form.declined,
signing.complete
enabled
boolean
legacy_secret_header
boolean

Deprecated. true only on endpoints created before 2026-09-22, which still receive the raw secret in X-Webhook-Secret; set false once you verify X-Webhook-Signature. New endpoints are created false and never receive the header.

created_at
string<date-time>
secret_key
string

Only returned on create or regenerate