Create Webhook Endpoint V1

Register a durable webhook endpoint. Returns the signing secret exactly once on creation. Subsequent reads omit it…

POST /api/v1/webhooks

cURL

curl --request POST \
  --url 'https://api.computer.stateset.app/api/v1/webhooks' \
  --header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
  "url": "https://example.com/webhooks/stateset",
  "events": [
    "string"
  ]
}'

201

{
  "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "url": "https://example.com/webhooks/stateset",
  "events": [
    "string"
  ],
  "is_active": true,
  "created_at": "2026-08-31T14:22:05Z",
  "updated_at": "2026-08-31T14:22:05Z",
  "secret": "YOUR_API_KEY"
}

Register a durable webhook endpoint.

Returns the signing secret exactly once on creation. Subsequent reads omit it; if you lose it or want to roll a leaked secret, call POST /webhooks/{id}/rotate-secret — it preserves the delivery history and only changes the signing secret.

Request body

CreateWebhookEndpointRequest

url · string · required

Receiver URL. Must start with http:// or https://; ≤2048 chars.

events · string[]

Events to subscribe to. Either explicit names (‘job.completed’, ‘job.failed’) or ’*’ for all.

Response

WebhookEndpointWithSecret

id · string · required

url · string · required

events · string[] · required

is_active · boolean · required

created_at · string · required

updated_at · string · required

secret · string · required

HMAC-SHA256 signing secret. Compare incoming X-Webhook-Signature against HMAC(secret, f'{t}.{body}').

Status codes

Code	Meaning
201	Successful Response
422	Validation Error

cURL

curl --request POST \
  --url 'https://api.computer.stateset.app/api/v1/webhooks' \
  --header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
  "url": "https://example.com/webhooks/stateset",
  "events": [
    "string"
  ]
}'

201

{
  "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "url": "https://example.com/webhooks/stateset",
  "events": [
    "string"
  ],
  "is_active": true,
  "created_at": "2026-08-31T14:22:05Z",
  "updated_at": "2026-08-31T14:22:05Z",
  "secret": "YOUR_API_KEY"
}