Webhooks

Tenant-wide webhook subscriptions for event notifications.

📄️ List webhook subscriptions

List tenant-wide webhook subscriptions. The signing_secret is NEVER returned here (only on create). Use cursor pagination. Scope: admin or manage_webhooks.

📄️ Create a webhook subscription

Create a tenant-wide webhook subscription. **The signing_secret in the response is shown exactly once**. Store it now. Rotation = DELETE + re-create. Scope: admin or manage_webhooks.

📄️ Get a webhook subscription

Returns one subscription (signing_secret intentionally omitted). Scope: admin or manage_webhooks.

📄️ Delete a webhook subscription

Hard deletes. Also the rotation path: to rotate the signing_secret, DELETE and recreate. Scope: admin or manage_webhooks.

📄️ Send a test event

Fires a synthetic `webhook.test` event to the subscription URL with the SAME HMAC signing path as real events (x-autorev-signature + x-autorev-timestamp). Useful for debugging signature verification. Scope: admin or manage_webhooks.