Create a webhook
Creates a webhook and returns it with its signing secret.
This response is the only time the secret is shown; rotate it to get a new one.
Guide: Webhook delivery
A project secret key: vh_sk_... for production, vh_sk_test_... for test. Keep it on your servers.
In: header
Path parameters
The project's id, proj_.... A secret key works only in the project it belongs to.
Request body
application/json
TypeScript definitions
Use the request body type in TypeScript.
What the webhook is for.
A longer note for the team.
The URL to POST events to, reachable from the internet: Voidhash does not call localhost or private networks.
The events the webhook receives; at least one.
1 <= itemsWhose purchase events it receives. Defaults to production; events of no purchase, such as a person's, reach both.
Examples
curl -X POST "https://api.voidhash.com/api/v1/projects/proj_tz4a98xxat96iws9zmbrgj3a/webhooks" \ -H "Authorization: Bearer vh_sk_..." \ -H "Content-Type: application/json" \ -d '{ "name": "Orders backend", "url": "https://example.com/webhooks/voidhash", "events": [ "subscription.created", "subscription.renewed", "purchase.refunded" ], "environment": "production" }'{ "id": "wh_ep_q5w8e2r7t1y4u9i3o6p0a2s5", "projectId": "proj_tz4a98xxat96iws9zmbrgj3a", "name": "Orders backend", "description": null, "url": "https://example.com/webhooks/voidhash", "events": [ "subscription.created", "subscription.renewed", "purchase.refunded" ], "environment": "production", "status": "active", "consecutiveFailures": 0, "lastSuccessAt": null, "createdAt": "2026-03-01T10:00:00.000Z", "secret": "whsec_..."}{ "error": { "type": "invalid_request", "code": "invalid_webhook_url", "message": "Webhook URL must point to a public address, not localhost or a private network", "param": "url" }}{ "error": { "type": "unauthenticated", "code": "invalid_api_key", "message": "This secret key is not valid." }}{ "error": { "type": "permission_denied", "code": "permission_denied", "message": "Insufficient permissions." }}{ "error": { "type": "not_found", "code": "project_not_found", "message": "There is no project proj_tz4a98xxat96iws9zmbrgj3a, or this credential cannot use it.", "param": "projectId" }}{ "error": { "type": "internal", "code": "internal_error", "message": "Something went wrong on our side. Try again, and contact support with the Request-Id header if it keeps failing." }}Response body
application/json
application/json
application/json
application/json
application/json
application/json
Errors
| Status | type | code | When |
|---|---|---|---|
| 400 | invalid_request | invalid_webhook_url | For a URL Voidhash cannot deliver to. |
It can also fail with the errors every operation shares, such as unauthenticated; see Errors.
More in Webhooks
- List webhooks
GET - Retrieve a webhook
GET - Update a webhook
PATCH - Delete a webhook
DELETE - Rotate a webhook's secret
POST - Send a test event
POST - List a webhook's deliveries
GET - Retrieve a webhook delivery
GET - Retry a webhook delivery
POST
Something wrong or missing on this page? Tell us by email or on Discord.