The response includes a signing secret that you must store securely. This secret is used to verify webhook authenticity and is only shown once.
Path Parameters
The customer’s external ID (starts with cus_)
Request Body
The HTTPS URL where webhook events will be sent
Array of event types to subscribe to (minimum 1 event)
Optional description for the webhook endpoint (max 500 characters)
Response
Webhook endpoint identifier (starts with whep_)
Always returns "webhook_endpoint"
Array of subscribed event types
Whether the endpoint is active
Webhook signing secret - Store this securely! Only shown once.
Security warning about storing the secret
ISO 8601 timestamp when created
When the endpoint was last used
Response Example
{
"id": "whep_1234567890abcdef",
"object": "webhook_endpoint",
"url": "https://api.mycompany.com/webhooks/hopnow",
"events": ["payin.completed", "payout.completed", "account.created"],
"is_active": true,
"description": "Production webhook for payment notifications",
"secret": "whsec_1234567890abcdef1234567890abcdef",
"warning": "Store this secret securely. It will not be shown again.",
"created": "2024-01-01T00:00:00Z",
"last_used_at": null
}