Skip to main content
POST
Registers an HTTPS endpoint to receive signed events. An account may have up to 20 endpoints. The response includes the signing secret — returned here (and on rotation) — which you store to verify signatures.
These are the partner webhook control plane endpoints (HMAC-signed, retried, replayable). They are distinct from the per-list Delivery Forwarding webhooks configured in the dashboard.

Body Parameters

string
required
An https:// URL, max 2000 characters, resolving to a public host (private/loopback addresses are rejected).
array
required
A non-empty list of event types to subscribe to — any of the message events (message.delivered, message.failed, message.reply, contact.opted_out) or business-profile events (business_profile.verified, business_profile.rejected, business_profile.name_confirm_required, business_profile.review_required).

Examples

Error Codes

Next Steps

Verify signatures

Validate the HMAC on every event.

List endpoints

See all endpoints on the account.