Webhooks

Tenant-wide webhook subscriptions for event notifications.

📄️ List webhook subscriptions

List tenant-wide webhook subscriptions. The signing_secret is NEVER returned here (only on create). Use cursor pagination.

📄️ Create a webhook subscription

Create a tenant-wide webhook subscription. **The signing_secret in the response is shown exactly once** — store it now. Rotation = DELETE + re-create. Scope: admin.

📄️ Get a webhook subscription

Get a webhook subscription

📄️ Delete a webhook subscription

Hard deletes. Also the rotation path — to rotate the signing_secret, DELETE and recreate. Scope: admin.

📄️ Send a test event

Fires a synthetic `webhook.test` event to the subscription URL with the SAME HMAC signing path as real events (x-autorev-signature + x-autorev-timestamp). Useful for debugging signature verification. Scope: admin.