The signing secret is returned once at creation. Use it to verify the
X-Dravo-Signature header on every delivery — see
webhooks for the scheme.
POST
/v1/webhooksAPI key (dra_…) or dashboard JWT
Register a webhook endpoint. The signing secret is shown once.
AuthorizationstringheaderrequiredBearer token. Use a Dravo API key (`dra_...`) or a dashboard JWT.
urlstring (URL)requiredEndpoint that will receive events.
eventsstring[]requiredpost.published, post.failed, post.queued or connection.revoked (at least one).
idstringWebhook endpoint id.
urlstringDestination URL events are POSTed to.
eventsstring[]Subscribed events: post.published, post.failed, post.queued, connection.revoked.
activebooleanWhether the endpoint currently receives deliveries.
signing_secretstringSecret (whsec_…) to verify delivery signatures. Shown once.
const response = await fetch("https://api.dravo.dev/v1/webhooks", { method: "POST", headers: { "Authorization": "Bearer " + process.env.DRAVO_API_KEY, "Content-Type": "application/json",}, body: JSON.stringify({ "url": "https://example.com/hook", "events": [ "post.published", "post.failed" ]})});const data = await response.json();console.log(data);{ "id": "wh_1", "url": "https://example.com/hook", "events": [ "post.published", "post.failed" ], "active": true, "signing_secret": "whsec_…"}