Skip to main content
POST
Register a webhook endpoint
The secret field is returned only once at registration time. Store it securely — it cannot be retrieved again. Use it to verify incoming Stablepay-Signature headers on your endpoint.

Authorizations

Authorization
string
header
required

Stablepay API key. Include as Authorization: Bearer <key>.

Body

application/json
url
string<uri>
required

Your HTTPS endpoint that will receive POST requests.

Example:

"https://app.walletIssuer.io/webhooks/stablepay"

events
string[]

Event types to subscribe to. Empty array = all events.

Example:

Response

201 - application/json

Webhook registered. Save the secret. It is not retrievable after this response.

webhookId
string<uuid>
required

Registration ID.

url
string<uri>
required
events
string[]
required
secret
string
required

HMAC signing secret that is returned once only. Store in your secrets manager. Used to verify Stablepay-Signature on inbound events.

Example:

"a3f7c2e1d4b8a0..."