Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

API token obtained from the Tokens endpoint. Include as Authorization: Bearer <token>.

Body

application/json
url
string<uri>
required
events
enum<string>[]
required
Minimum array length: 1
Available options:
scan.created,
scan.completed,
scan.failed,
scan.cancelled,
vulnerability.created,
vulnerability.status_changed,
vulnerability.severity_changed,
*
business_unit
string | null

Optional. Restrict deliveries to events whose asset carries this business_unit. Requires the Enterprise plan. Omit or null for an organization-wide subscription.

is_active
boolean
default:true

Response

Webhook created.

webhook
object
required
secret
string
required

Webhook signing secret. Only returned at creation time.