Orishare
Api

List endpoints (secrets never shown)

GET
/webhook_endpoints

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/webhook_endpoints"
{  "data": [    {      "id": "string",      "url": "string",      "subscribed_types": [        "string"      ],      "status": "active",      "disabled_reason": "string",      "failing_since": "string",      "secret_rotated_at": "string",      "version": 0,      "created_at": "string",      "updated_at": "string"    }  ],  "next_cursor": "string",  "has_more": true}

Create an endpoint; the signing secret is returned once

POST
/webhook_endpoints

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Header Parameters

Idempotency-Key?string

Required by the API on this route (400 idempotency_key_required without it); the official clients generate a UUID when you omit it.

Length1 <= length <= 255

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhook_endpoints" \  -H "Content-Type: application/json" \  -d '{    "url": "https://example.com/hooks/orishare",    "subscribed_types": [      "points.awarded",      "reward.issued"    ]  }'
{  "id": "string",  "url": "string",  "subscribed_types": [    "string"  ],  "status": "active",  "disabled_reason": "string",  "failing_since": "string",  "secret_rotated_at": "string",  "version": 0,  "created_at": "string",  "updated_at": "string",  "signing_secret": "string"}

One endpoint

GET
/webhook_endpoints/{id}

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/webhook_endpoints/string"
{  "id": "string",  "url": "string",  "subscribed_types": [    "string"  ],  "status": "active",  "disabled_reason": "string",  "failing_since": "string",  "secret_rotated_at": "string",  "version": 0,  "created_at": "string",  "updated_at": "string"}

Change url, subscriptions, or re-enable a disabled endpoint

PATCH
/webhook_endpoints/{id}

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X PATCH "https://example.com/webhook_endpoints/string" \  -H "Content-Type: application/json" \  -d '{}'
{  "id": "string",  "url": "string",  "subscribed_types": [    "string"  ],  "status": "active",  "disabled_reason": "string",  "failing_since": "string",  "secret_rotated_at": "string",  "version": 0,  "created_at": "string",  "updated_at": "string"}

Delete an endpoint and its delivery history

DELETE
/webhook_endpoints/{id}

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/webhook_endpoints/string"
Empty

Rotate the signing secret (returned once; the previous one verifies for 24 h)

POST
/webhook_endpoints/{id}/secrets

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhook_endpoints/string/secrets"
{  "id": "string",  "url": "string",  "subscribed_types": [    "string"  ],  "status": "active",  "disabled_reason": "string",  "failing_since": "string",  "secret_rotated_at": "string",  "version": 0,  "created_at": "string",  "updated_at": "string",  "signing_secret": "string"}

List deliveries (newest first)

GET
/webhook_deliveries

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Query Parameters

limit?integer
Range1 <= value <= 200
Default50
cursor?string
Lengthlength <= 2048
endpoint_id?string
status?string

Value in

  • "pending"
  • "delivered"
  • "dead"
  • "disabled"
event_type?string

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/webhook_deliveries"
{  "data": [    {      "id": "string",      "endpoint_id": "string",      "event_type": "string",      "event_id": "string",      "payload": null,      "status": "pending",      "attempts": 0,      "next_attempt_at": "string",      "last_status": 0,      "last_error": "string",      "delivered_at": "string",      "replay_of": "string",      "created_at": "string"    }  ],  "next_cursor": "string",  "has_more": true}

Send a webhook.test ping to one endpoint now

POST
/webhook_deliveries

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhook_deliveries" \  -H "Content-Type: application/json" \  -d '{    "endpoint_id": "string"  }'
{  "delivery": {    "id": "string",    "endpoint_id": "string",    "event_type": "string",    "event_id": "string",    "payload": null,    "status": "pending",    "attempts": 0,    "next_attempt_at": "string",    "last_status": 0,    "last_error": "string",    "delivered_at": "string",    "replay_of": "string",    "created_at": "string"  },  "attempt": {    "delivery_id": "string",    "status": "delivered",    "attempts": 0,    "http_status": 0,    "error": "string",    "next_attempt_at": "string"  }}

One delivery with its envelope and attempt history

GET
/webhook_deliveries/{id}

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/webhook_deliveries/string"
{  "id": "string",  "endpoint_id": "string",  "event_type": "string",  "event_id": "string",  "payload": null,  "status": "pending",  "attempts": 0,  "next_attempt_at": "string",  "last_status": 0,  "last_error": "string",  "delivered_at": "string",  "replay_of": "string",  "created_at": "string"}

Replay: a new delivery of the same envelope, attempted now

POST
/webhook_deliveries/{id}/replay

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Path Parameters

id*string
Length1 <= length

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhook_deliveries/string/replay"
{  "delivery": {    "id": "string",    "endpoint_id": "string",    "event_type": "string",    "event_id": "string",    "payload": null,    "status": "pending",    "attempts": 0,    "next_attempt_at": "string",    "last_status": 0,    "last_error": "string",    "delivered_at": "string",    "replay_of": "string",    "created_at": "string"  },  "attempt": {    "delivery_id": "string",    "status": "delivered",    "attempts": 0,    "http_status": 0,    "error": "string",    "next_attempt_at": "string"  }}

Materialize deliveries for one outbox payload (relay hook; local and tests)

POST
/webhook_deliveries/fan_out

Authorization

bearer
AuthorizationBearer <token>

Secret key (osk_…), publishable key (opk_…) or personal access token (opat_…).

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhook_deliveries/fan_out" \  -H "Content-Type: application/json" \  -d '{    "outbox_id": "string",    "payload": {      "property1": null,      "property2": null    }  }'
{  "delivery_ids": [    "string"  ]}

Tiers

Tier programs, levels and per-customer tiers.

Error codes

Next Page