WebhookWithSecret

Schema

Fields

· 10

id string · uuid required

Unique identifier for the webhook subscription.

name string required

Display name for the subscription. Auto-generated when not provided on create.

url string · uri required

HTTPS delivery URL. Sotion POSTs signed event envelopes here.

events array of WebhookEvent required

Event types this subscription receives.

values

active boolean required

Whether the subscription is currently delivering events.

secretPrefix string required

First 10 characters of the signing secret, used to identify which secret an integration holds. The full secret is only returned on create.

managedBy string · nullable

External system that owns this subscription (e.g. 'zapier'). Null when user-managed via the dashboard.

createdAt string · date-time· nullable

When the subscription was created.

updatedAt string · date-time· nullable

When the subscription was last modified.

secret string required

Full HMAC-SHA256 signing secret (prefix 'whsec_'). Returned ONCE on create — persist it to verify X-Webhook-Signature on incoming deliveries.

· 1 operation