Register a webhook subscription
Registers a webhook subscription for the request tenant. The raw secret is used only to derive a SHA-256 hash (never persisted in cleartext); in BYOC the real signing secret comes from the client’s Kubernetes Secret. Field presence/type is validated against the schema (422); business-rule failures return coded 400/409/422 problem+json.
Authorizations
JWT bearer token issued by the identity provider.
Body
Business event types this subscription is delivered.
HTTPS endpoint that receives webhook deliveries for the request tenant.
"https://client.example.com/webhooks/slc"
Whether the subscription is active and eligible for delivery.
true
Optional human-readable label for the subscription.
"Primary settlement consumer"
Optional static HTTP headers added to every delivery request to this endpoint.
Raw signing secret used only to derive the SHA-256 HMAC signing key; never persisted or echoed in cleartext. In BYOC the real signing secret comes from the client's Kubernetes Secret.
Optional per-delivery HTTP timeout in seconds; omitted or zero applies the service default (10s).
10
Response
Created
Whether the subscription is active and eligible for delivery.
true
Subscription creation timestamp (RFC3339, UTC).
"2026-06-15T07:50:00Z"
Business event types this subscription is delivered.
Cumulative count of failed delivery attempts.
3
Subscription id (UUID).
"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"
Timestamp of the most recent delivery attempt (RFC3339, UTC); null when none has occurred.
"2026-06-15T07:50:00Z"
HTTP status code of the most recent delivery attempt; null when none has occurred.
200
Cumulative count of successful deliveries.
128
Subscription last-update timestamp (RFC3339, UTC).
"2026-06-15T07:50:00Z"
HTTPS endpoint that receives webhook deliveries.
"https://client.example.com/webhooks/slc"
Human-readable label for the subscription.
"Primary settlement consumer"

