Create a webhook endpoint
POST /rest/v1/webhook_endpoints
The signing secret is returned only in this response — store it. Deliveries are signed with X-Nembol-Signature: t=<unix_ts>,v1=<hmac_sha256> over <t>.<raw_body>. Delivery is at-least-once and unordered: deduplicate by event.id and tolerate unknown event types.
Authorization
apiKey Authorization: Bearer nbl_live_... (or nbl_test_... for test mode). Test-mode writes are validated and simulated but never persisted and never touch channels; simulated results are marked simulated.
In: header
Header Parameters
Unique client-generated key (max 255 chars), stored 24h.
length <= 255Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
curl -X POST "https://example.com/webhook_endpoints" \ -H "Content-Type: application/json" \ -d '{ "url": "http://example.com", "events": [ "order.created" ] }'{ "id": "whe_4b8s1", "object": "webhook_endpoint", "url": "http://example.com", "events": [ "order.created" ], "status": "enabled", "created_at": "2019-08-24T14:15:22Z", "secret": "string"}Last updated on July 28, 2026
Need help?
The API is in private beta — email us and a human replies, usually within one business day.