Register a new webhook endpoint to receive event notifications. The response includes the HMAC-SHA256 signing secret in full; it is masked on subsequent reads. Access requires a machine API key with webhooks:write scope for the bound organization. Current producers emit transactions.sync_available and connection.status_changed, and test can be triggered explicitly via the API. The remaining spec-defined event types are reserved for upcoming producers.
Opaque API key passed as Authorization: Bearer <key>. Keys are organization-bound, environment-bound (live or test), scope-carrying, and expiring. Create and manage keys via the console.
HTTPS URL where events will be delivered via POST.
2048^https://.+Event types to subscribe to. Current producers emit transactions.sync_available and connection.status_changed, and test can be triggered explicitly via the API. The remaining spec-defined event types are reserved for upcoming producers.
1connection.status_changed, account.created, account.updated, transactions.sync_available, transfer.status_changed, test Opaque client-defined metadata.