Webhooks

Self-service webhook subscriptions for real-time push delivery of threat feed events. Enterprise customers register HTTPS endpoints and receive HMAC-SHA256 signed payloads when indicators are added, updated, or removed. Supports event type and indicator type filtering.

📄️ List webhook subscriptions

Returns all webhook subscriptions owned by the authenticated API key's user.

📄️ Create webhook subscription

Register a new HTTPS endpoint to receive push notifications for feed events.

📄️ Update webhook subscription

Update URL, event types, indicator types, enabled status, or description.

📄️ Delete webhook subscription

Permanently delete a webhook subscription and its delivery history.

📄️ Rotate signing secret

Generate a new signing secret. The old secret is immediately invalidated.

📄️ Test webhook delivery

Send a sample event payload to verify your endpoint receives and validates correctly.

📄️ Get delivery log

Returns recent delivery attempts for this subscription (last 100).