Webhooks
Create webhook
Registers a new webhook endpoint. The response includes the signing secret — store it securely, it is shown only once.
POST
string
required
BOH API key with
admin:webhooks scope.string
required
HTTPS URL that will receive POST requests. Must start with
https://.string[]
required
One or more event types to subscribe to. Supported events:
inventory_transaction.completedinventory_transaction.failedpurchase_order.status_changedapi_key.expiringping
object
The created endpoint:
id, url, events, is_active, disabled_reason, consecutive_failures, created_at, updated_at.string
Signing secret (
whsec_...). Shown only once. Store it in your secrets manager immediately. Use it to verify the X-BOH-Signature header on incoming requests.
