Create a webhook
On Usertour Cloud, webhooks need a paid plan (Starter or above) — a Hobby project gets 403 E0043. Self-hosted instances are never gated. The same applies to update, rotate-secret and delivery; reads and delete stay available on any plan.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Body
Endpoint events are POSTed to. Public HTTPS by default; deployments with ALLOW_PRIVATE_NETWORK_EGRESS may use private/http targets (SSRF-guarded server-side).
2083^https?:\/\/Topic subscriptions: "*" (everything); "event.tracked" (all behavior events) or "event.tracked." for one; "content" / "content.published"; "user" or "user.created" / "user.updated" / "user.deleted"; "company" or "company.created" / "company.updated" / "company.deleted". A bare family name also covers topics added to it later. High-volume events (page_viewed) are excluded from the wildcard forms and must be subscribed explicitly.
1 - 100 elements1 - 200Defaults to true.
200Response
Webhook created
webhook Consecutive failed delivery attempts (circuit-breaker streak; any success resets).
-9007199254740991 <= x <= 9007199254740991While in the future, deliveries to this endpoint are held and sent after the window (cooldown).
Set when the system disabled the endpoint after sustained delivery failure.
HMAC signing secret (whsec_...). Present only for tokens holding webhook:manage, and only on single-object reads, create, and rotate. An EMPTY string means the stored secret can no longer be decrypted (e.g. the encryption key changed) — call rotate-secret to mint a fresh one.