Register a webhook or Slack delivery for a status page
POST/api/v1/orgs/:org/status-pages/:statusPageUid/subscribers/endpoints
AUTHENTICATED, operator-side. Creates a subscription that delivers to a URL rather than a mailbox, already confirmed — the operator registering their own endpoint IS the verification.
The URL must be https and must not resolve to a loopback or private host; a slack subscription must point at hooks.slack.com. It is stored ENCRYPTED and never returned: list responses carry only a masked endpoint hint.
Webhook deliveries are signed with HMAC-SHA256 over <timestamp>.POST.<path>.<sha256 of the raw body, hex>, carried in X-SP-Signature / X-SP-Timestamp / X-SP-Key-Id. The signing secret is returned by THIS CALL ONLY (data.signingSecret) and never again — a receiver that loses it needs the subscription re-created.
The path is deliberately distinct from .../subscribers, which is the public email-only route: the two cannot share a pattern on the router.
Request
Responses
- 201
- 401
- 404
- 422
The subscription, plus the signing secret — shown once, here.
Authentication required
Resource not found
Validation error