Create a webhook endpoint

POST /v1/webhook-endpoints

Registers a URL we'll POST signed event payloads to. The signing secret is returned once in the response — store it before closing.

For payload format and signature verification see the Webhooks guide. For event payloads see Webhook events.

Request

curl -X POST https://api.domainee.dev/v1/webhook-endpoints \
  -H "Authorization: Bearer $DOMAINEE_API_KEY" \
  -H "content-type: application/json" \
  -d '{
    "url": "https://your-app.com/webhooks/domainee",
    "events": []
  }'

Body parameters

Field	Required	Notes
url	✅	Must be HTTPS. We retry up to 6 times with exponential backoff.
events	✅	Array of event types. Empty array [] = subscribe to all. See Webhook events.

Response — 201 Created

{
  "endpoint": {
    "id": "0d8ab7f2-...",
    "workspaceId": "cb9e05b7-...",
    "url": "https://your-app.com/webhooks/domainee",
    "events": [],
    "enabled": true,
    "createdAt": "2026-05-05T11:39:12.884Z"
  },
  "secret": "whsec_aBcDeF…"
}

The secret is returned only on this response — we never echo it back. It's used to verify HMAC signatures on every incoming webhook payload. Store it in your secret manager.

Errors

Status	Code	When
400	bad_request	URL isn't HTTPS or unknown event type in events