Create a webhook
Returns the signing secret ONCE. Subscribing to an event requires the read scope protecting it.
POST
https://api.helpbento.com /v1 /webhooksAuthentication
AuthorizationstringheaderBearer <token>requiredAn API key, e.g. hb_live_… (live) or hb_test_… (test).
Header parameters
1 paramIdempotency-Keystringlength: 0…255Optional idempotency key (1–255 chars). Repeating a mutating request with the same key within 24h replays the original response instead of re-executing it; a concurrent in-flight request with the same key returns 409. Use a unique key (e.g. a UUID) per logical operation so network retries are safe.
Request body
application/jsonrequiredurlstringurirequiredHTTPS endpoint (no internal/private hosts).
eventsarray of stringrequired
Responses
idstringurlstringurieventsarray of stringstatusstringactive | disabledcreatedAtstringdate-timesigningSecretstringShown once. Verify the X-HelpBento-Signature header with it.
Errors