Skip to main content
POST
Set (or rotate) the caller's outbound webhook endpoint

Authorizations

Authorization
string
header
required

Clerk session token, Authorization: Bearer <token> — the first-party browser app's own auth. Used only by this internal /api/v1/* surface, never by /api/public/v1/*.

Body

application/json
url
string<uri>
required
rotateSecret
boolean

Response

The endpoint's current state, including the secret(s) if just (re)generated.

id
string
required
url
string
required
secret
string
required
secondarySecret
string | null
required
enabled
boolean
required
createdAt
string
required
updatedAt
string
required