Create a webhook
Create a new webhook subscription. The signing secret is returned only in this response. Asset-scoped tokens must provide an in-scope business_unit and cannot create organization-wide subscriptions.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Body
HTTPS endpoint that receives the signed webhook deliveries.
Event names to subscribe to. Use * to receive every event.
1scan.created, scan.completed, scan.failed, scan.cancelled, vulnerability.created, vulnerability.status_changed, vulnerability.severity_changed, * Optional. Restrict deliveries to events whose asset carries this business_unit. Requires the Enterprise plan. Omit or null for an organization-wide subscription.
When false, the webhook is stored but no deliveries are sent.