Register a notification webhook
Register a webhook for the organization, provision its signing secret, and subscribe it to the given topics — all in one atomic append. The signing secret is returned once in this response and never again, so the caller must store it now. A malformed or disallowed URL (non-https outside dev, or an SSRF-blocked address) is rejected and nothing is created.
Each call registers a new, independent endpoint; it is not idempotent — a retried or repeated POST with the same URL creates a second webhook with its own secret, so callers that retry must guard against duplicates. The response is built from the just-committed create rather than re-read, so a transient read failure can never strand the one-time secret.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
The organization ID of the user's organization
Body
Response
Created
The response to a create: the new webhook plus its signing secret. The secret is returned once, here only — it is never retrievable again, so the caller must store it now.
