curl --request POST \
--url https://api.questra.ai/webhooks \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'X-Org-Id: <x-org-id>' \
--data '
{
"url": "<string>",
"events": [
"<string>"
],
"description": "<string>"
}
'{
"id": "<string>",
"org_id": "<string>",
"url": "<string>",
"events": [
"<string>"
],
"active": true,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"secret": "<string>",
"description": "<string>"
}Register a new webhook endpoint. Returns the webhook including its secret — copy it immediately, it is only shown once.
curl --request POST \
--url https://api.questra.ai/webhooks \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'X-Org-Id: <x-org-id>' \
--data '
{
"url": "<string>",
"events": [
"<string>"
],
"description": "<string>"
}
'{
"id": "<string>",
"org_id": "<string>",
"url": "<string>",
"events": [
"<string>"
],
"active": true,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"secret": "<string>",
"description": "<string>"
}Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Webhook created. The secret is only returned here — store it securely.
A registered webhook endpoint
Unique webhook ID
Organization ID this webhook belongs to
The endpoint URL that receives event deliveries
Event types this webhook subscribes to. Empty array means all events.
Whether deliveries are enabled
HMAC-SHA256 signing secret. Only returned on create and rotate — store it securely.
Optional human-readable label