Dashboard

Webhooks

Auth Required

Create Webhook

POSThttps://api.inboxjot.com/v1/webhooks

Creates a webhook. Inboxjot sends the events you pick to its URL. Needs a Full key. A key limited to one domain answers 403. Send an optional Idempotency-Key header to retry safely. See Idempotency.

The response holds the signing secret. It is returned only here, so store it now. To see it again, copy it from the webhook page in the dashboard.

POST/v1/webhooks
curl -X POST https://api.inboxjot.com/v1/webhooks \
  -H "Authorization: Bearer $INBOXJOT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Production",
    "url": "https://api.acme.dev/webhooks/inboxjot",
    "events": [
      "email.delivered",
      "email.bounced",
      "email.complained"
    ]
  }'
{
  "id": "whk_06d2mfk8r8ja5fv2xn7qe",
  "name": "Production",
  "url": "https://api.acme.dev/webhooks/inboxjot",
  "events": [
    "email.delivered",
    "email.bounced",
    "email.complained"
  ],
  "status": "enabled",
  "disabled_reason": null,
  "created_at": "2026-10-21T09:00:00.000Z",
  "updated_at": "2026-10-21T09:00:00.000Z",
  "secret": "whsec_MfKQ9r1GKG3tZ8vQ2pX7aN4bE6cD1fH0"
}

Created the webhook.

Body Parameters

namestringrequired

The webhook name, 1 to 100 characters.

urlstringrequired

An https:// URL on a public address, up to 2,000 characters. It cannot hold a user name or password.

eventsstring[]required

At least one of email.sent, email.delivered, email.opened, email.clicked, email.bounced, email.complained, email.delivery_delayed, email.rejected, email.failed, email.unsubscribed, contact.created, contact.updated or contact.deleted.

Response

idstring

The webhook id.

namestring

The webhook name.

urlstring

Where events are sent.

eventsstring[]

The event types it gets.

statusstring

enabled or disabled. Inboxjot turns a webhook off when deliveries keep failing.

disabled_reasonstring | null

Why the webhook was turned off.

created_atstring

When it was created.

updated_atstring

When it last changed.

secretstring

The signing secret, starting with whsec_. Returned only here; store it now.

Responses

POST/v1/webhooks
curl -X POST https://api.inboxjot.com/v1/webhooks \
  -H "Authorization: Bearer $INBOXJOT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Production",
    "url": "https://api.acme.dev/webhooks/inboxjot",
    "events": [
      "email.delivered",
      "email.bounced",
      "email.complained"
    ]
  }'
{
  "id": "whk_06d2mfk8r8ja5fv2xn7qe",
  "name": "Production",
  "url": "https://api.acme.dev/webhooks/inboxjot",
  "events": [
    "email.delivered",
    "email.bounced",
    "email.complained"
  ],
  "status": "enabled",
  "disabled_reason": null,
  "created_at": "2026-10-21T09:00:00.000Z",
  "updated_at": "2026-10-21T09:00:00.000Z",
  "secret": "whsec_MfKQ9r1GKG3tZ8vQ2pX7aN4bE6cD1fH0"
}

Created the webhook.