Webhooks

Manage webhook endpoints programmatically — register your receiver, list what is subscribed, and remove endpoints. For delivery format, signature verification, and retry behaviour, see the Webhooks guide.

List webhook endpoints Embed Automate and above

Returns every webhook endpoint registered for your workspace, plus the full list of subscribable event names. Signing secrets are never included in list responses.

GET/v1/headless/webhooks

Examples

cURL request

curl --request GET \
  --url "https://api.coassemble.com/api/v1/headless/webhooks" \
  --header "Authorization: COASSEMBLE:YOUR_WORKSPACE_ID:YOUR_API_KEY"

Response

JSON response

{
  "events": [
    "example"
  ],
  "endpoints": [
    {
      "id": 1234,
      "url": "example",
      "events": [
        "example"
      ],
      "enabled": false,
      "created": "2026-07-23T15:01:43.148Z",
      "updated": "2026-07-23T15:01:43.148Z"
    }
  ]
}

Create a webhook endpoint Embed Automate and above

Registers an endpoint and generates its signing secret.

info

The secret is returned only in this response — store it immediately. To rotate a secret, delete the endpoint and create it again.

The url must use https://.
events must contain at least one valid event name (see GET /v1/headless/webhooks for the list, e.g. course.commenced, course.completed, course.created).

POST/v1/headless/webhooks

Body parameters

Field	Type	Required	Desc	Options
`url`	`string`	Yes	HTTPS URL webhook deliveries will be POSTed to	—
`events`	`string[]`	Yes	Event names to subscribe to, e.g. course.completed	—
`enabled`	`boolean`	No		—

Examples

cURL request

curl --request POST \
  --url "https://api.coassemble.com/api/v1/headless/webhooks" \
  --header "Authorization: COASSEMBLE:YOUR_WORKSPACE_ID:YOUR_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
    "url": "example",
    "events": [
        "example"
    ],
    "enabled": true
}'

Response

JSON response

{
  "id": 1234,
  "url": "example",
  "events": [
    "example"
  ],
  "enabled": false,
  "created": "2026-07-23T15:01:43.148Z",
  "updated": "2026-07-23T15:01:43.148Z",
  "secret": "example"
}

Delete a webhook endpoint Embed Automate and above

Removes an endpoint. Deliveries stop immediately and its signing secret is invalidated.

DELETE/v1/headless/webhooks/{id}

Path parameters

Field	Description	Options
`id`	Webhook endpoint ID	—

Examples

cURL request

curl --request DELETE \
  --url "https://api.coassemble.com/api/v1/headless/webhooks/1234" \
  --header "Authorization: COASSEMBLE:YOUR_WORKSPACE_ID:YOUR_API_KEY"

Response

JSON response

{
  "success": false
}