Delete a webhook endpoint
Deletes the endpoint, along with the deliveries still queued for it, and answers `{ "object": "webhook", "webhook_id", "deleted": true }`. This cannot be undone and the signing secret cannot be recovered afterwards: to stop deliveries and keep both, update the endpoint with `disabled: true` instead. The events themselves are kept and stay readable under `/events`.
Deletes the endpoint, along with the deliveries still queued for it, and answers { "object": "webhook", "webhook_id", "deleted": true }. This cannot be undone and the signing secret cannot be recovered afterwards: to stop deliveries and keep both, update the endpoint with disabled: true instead. The events themselves are kept and stay readable under /events.
Authorization
secretKey Your secret key: sk_live_… or sk_test_….
In: header
Path Parameters
The webhook endpoint's id, which starts with wh_.
^wh_[0-9a-f]{32}$Response Body
application/json
application/json
application/json
curl -X DELETE "https://example.com/webhooks/wh_3f2b8c1e9a4d4e7b8c2a1d5e6f7a8b9c"{ "object": "webhook", "webhook_id": "wh_3f2b8c1e9a4d4e7b8c2a1d5e6f7a8b9c", "deleted": true}Create a webhook endpoint POST
The response includes the endpoint's signing `secret`. Registers a URL that receives signed events. The URL must be `https://` on a public host and carry no credentials; private, loopback, link-local and internal addresses are refused with `INVALID_REQUEST_BODY`, including hosts whose DNS answers with one. An endpoint created without `event_types` receives every event type. Each mode allows 16 endpoints (`409 LIMIT_REACHED`). Store the `secret` when you read it here: no other response repeats it except `GET /webhooks/{id}/secret`. Send `Idempotency-Key` so a retried request does not add a second endpoint — a replayed response has the secret stripped out, since a stored response must not keep it.
Retrieve a webhook endpoint GET
Returns one webhook endpoint: its URL, the event types it is subscribed to and whether it is disabled. The signing secret is not part of this response; read it with `GET /webhooks/{id}/secret`.