Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Send Authorization: Bearer whk_…, a webhook key from the dashboard. Webhook keys belong to one network, so pick the server that matches the key. lum_ API keys are not accepted here (401).

Body

application/json
name
string

Label, at most 128 characters.

Maximum string length: 128
expires_at
string<date-time>

Optional expiry, between one minute and five years ahead.

Response

The new key. secret is shown only in this response.

id
string<uuid>
required
tenant_id
string<uuid>
required
prefix
string
required
created_at
string<date-time>
required
name
string
secret
string

Plaintext whk_ key, first creation only.

last_used_at
string<date-time>

Updated at most once a minute.

revoked_at
string<date-time>
expires_at
string<date-time>

The key stops authenticating at this time. Absent: never expires.