Webhooks
Create a signed HTTPS webhook endpoint
The signing secret is returned only in this response.
API key permission: webhooks:write. Send a unique Idempotency-Key and reuse it only when retrying the same request.
Parameters
NameTypeDescription
Idempotency-Keystring · requiredUnique operation key. Reuse it only with the same method, path, and request body.
Request body
application/jsonStandard response headers
HeaderExampleDescription
Stepes-Request-Idb09de4aa-3874-4991-b85c-0bc86e780511Server-generated request identifier for support and audit correlation.
Stepes-API-Version2.0.0Effective Stepes API semantic version.
RateLimit-Policy120;w=60Effective request limit and window for the authenticated key.
RateLimitlimit=120, remaining=119, reset=60Current limit, remaining requests, and reset interval.
Idempotency-ReplayedtruePresent with value true when a stored mutation response is replayed.
Responses
201
Webhook created; copy the secret now
409
Idempotency conflict or invalid lifecycle transition
422
Request validation failed
{
"id": "string",
"object": "webhook_endpoint",
"url": "https://example.com/resource",
"name": "string",
"events": [
"quote.created"
],
"status": "active",
"created_at": "2026-07-23T12:00:00Z",
"updated_at": "2026-07-23T12:00:00Z",
"secret": "string"
}