Create a webhook subscription
POST
Scope: webhooks:write. The URL must be a public HTTPS address. The signing secret (secret) is returned only in this response. Idempotency-Key is required.
integrationKeyheader
AuthorizationBearer <cf_sk_…>Organization API key (cf_sk_…), created under Organization → API and automations → API keys and sent as Authorization: Bearer cf_sk_….
Idempotency-Key*stringLength
length <= 200application/json- body
name*stringLength
1 <= length <= 120url*stringPublic HTTPS URL. Private addresses, redirects and DNS rebinding are blocked.
Format
urievents*array<string>Items
1 <= itemsenabled*booleanSuccess
application/json- response
success*booleandata*unknownmeta?curl -X POST 'https://api.getclickfix.com/v1/public-api/webhooks' \ -H 'Idempotency-Key: string' \ -H 'Content-Type: application/json' \ -d '{ "name": "ERP sync", "url": "https://erp.example.com/clickfix/webhook", "events": [ "conversation.created", "message.received", "contact.updated" ], "enabled": true}'Example Response
{ "success": true, "data": { "uuid": "7a8b9c0d-1e2f-4a3b-8c4d-5e6f7a8b9c0d", "name": "ERP sync", "url": "https://erp.example.com/clickfix/webhook", "events": [ "conversation.created", "message.received", "contact.updated" ], "enabled": true, "created_at": "2026-11-01T10:00:00Z", "secret": "whsec_3f9c1a7e5b2d4c8f0a6e9b1d3c5f7a2e4b6d8c0f1a3e5b7d9c2f4a6e8b0d1c3f" }, "meta": { "request_id": "01JCK9ZQ3M8R2W7X5E4T1N0PAB" }}