A partner-registered URL that receives signed deliveries for a chosen subset of the domain event catalog — the same event keys that drive journey triggers. Each endpoint has its own rotatable HMAC signingSecret used to sign deliveries.
Fields
idID!businessBusiness!urlURL!Destination URL deliveries POST to.
managementUrlResourceUrl!Canonical staff-admin page for managing this endpoint (distinct from url, which is the external delivery target). Consume instead of building paths from the id.
descriptionStringOwner-facing label for the endpoint.
signingSecretString!Per-endpoint HMAC signing secret (whsec_…). Verify the Sessions-Signature header against HMAC-SHA256(secret, "{timestamp}.{body}").
subscribedEventTypes[String!]!Catalog event type keys this endpoint receives.
statusWebhookEndpointStatus!apiVersionString!Payload schema version this endpoint receives, e.g. 2026-06-01.
createdAtDateTime!updatedAtDateTime!deliveriesWebhookDeliveryConnection!Recent delivery attempts to this endpoint, newest first — the per-endpoint delivery log.