Skip to main content
POST
Register a notification webhook (free)

Authorizations

Authorization
string
header
required

Firebase ID token from /auth or any paid route, sent as a Bearer token: Authorization: Bearer <id_token> (the Bearer prefix is required).

Body

application/json
url
string
required

Public HTTPS URL to receive signed notification POSTs. Max 512 characters. Private/internal hosts are rejected.

Response

Webhook registered

registered
boolean
url
string
secret
string

Standard Webhooks signing secret (whsec_...). Shown only in this response — store it now. Rotate by re-registering.

signing
string

Always standard-webhooks.