Add a webhook

Sends the chosen events to an https address as signed JSON POSTs (WebsiteBuddy-Signature: HMAC-SHA256 with the secret in this answer). Use it to subscribe a Zapier or Make catch-hook. Up to 10 per account; private-network addresses are refused. Pass site_id to hear only one site's events.

POST/api/v1/webhooks

Authentication

An API key as Authorization: Bearer or x-api-key. It needs the webhooks:manage scope — add, change and delete webhooks.

webhooks:manageChanges the draft or a recordIdempotency-Key requiredMCP tool: create_webhook

Parameters

Named placeholders go in the path; the rest in a JSON body.

urlstringBody · required: The https:// address to POST to.8 to 500 characters
eventsarray of stringBody · required: Which events to send: form_message.created (A visitor sent a form message), site_order.created (A client site's store took an order), donation.received (A client site received a gift), appointment.created (A visitor booked a time), appointment.changed (A booking was confirmed, declined, cancelled or moved), member.requested (A visitor asked to become a member), content_request.answered (A client sent the content you asked for), site.changes_sent (A client finished changes and sent them to you), site.published (A site was published), shop_order.created (Someone ordered a website from your shop).
descriptionstringBody · optional: What it's for, e.g. Zapier — new messages to Slack.At most 120 characters
site_idstring | nullBody · optional: Only this site's events (one of your site ids). Leave it out or send null for every site; an endpoint narrowed to a site never hears shop_order.created.1 to 100 characters

Response

201 with JSON on success (schema on the right). Errors use the standard envelope; a retry with the same Idempotency-Key gets the first answer back (how retries work).

curl

curl -X POST 'https://websites.workflowcorp.com/api/v1/webhooks' \
  -H "Authorization: Bearer $WEBSITEBUDDY_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://hooks.zapier.com/hooks/catch/123456/abcdef/","events":["form_message.created","site_order.created"],"description":"Zapier — new messages to Slack"}'

Example arguments

{
  "url": "https://hooks.zapier.com/hooks/catch/123456/abcdef/",
  "events": [
    "form_message.created",
    "site_order.created"
  ],
  "description": "Zapier — new messages to Slack"
}

Response schema

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string"
    },
    "url": {
      "type": "string"
    },
    "events": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "site": {
      "anyOf": [
        {
          "type": "object",
          "properties": {
            "id": {
              "type": "string"
            },
            "name": {
              "type": "string"
            }
          },
          "required": [
            "id",
            "name"
          ],
          "additionalProperties": false
        },
        {
          "type": "null"
        }
      ],
      "description": "The one site whose events it hears; null = every site (and your shop orders)."
    },
    "description": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "secret_prefix": {
      "type": "string",
      "description": "The first characters of the signing secret, to tell secrets apart."
    },
    "status": {
      "type": "string",
      "enum": [
        "active",
        "paused"
      ]
    },
    "paused_reason": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "failures_in_a_row": {
      "type": "integer",
      "minimum": -9007199254740991,
      "maximum": 9007199254740991
    },
    "last_success_at": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "last_failure_at": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "is_sample": {
      "type": "boolean"
    },
    "created_at": {
      "type": "string"
    },
    "secret": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "The signing secret (whsec_…) — in this answer only; null when an Idempotency-Key replays it. Store it now."
    }
  },
  "required": [
    "id",
    "url",
    "events",
    "site",
    "description",
    "secret_prefix",
    "status",
    "paused_reason",
    "failures_in_a_row",
    "last_success_at",
    "last_failure_at",
    "is_sample",
    "created_at",
    "secret"
  ],
  "additionalProperties": false
}