Skip to main content
POST
Register a webhook endpoint

Authorizations

Authorization
string
header
required

A Supabase user access token (for app/key management).

Path Parameters

id
string<uuid>
required

Body

application/json
url
string<uri>
required

HTTPS URL to deliver events to (http is rejected).

events
string[]

Event types to subscribe to. The currently-delivered events are world.generation.succeeded and world.generation.failed; session.ended is reserved and not yet emitted.

Response

Endpoint created (secret shown once)

Returned ONCE at creation. The secret (prefixed whsec_) is unrecoverable afterward. Store it now.

id
string<uuid>
url
string<uri>
events
string[]
enabled
boolean
created_at
string<date-time>
secret
string

Signing secret used to verify the Alakazam-Signature header. Shown only once.

Example:

"whsec_…"