SUQODocs
User GuideAPI ReferenceSDKs
Webhooks

Register a webhook

Subscribe an https endpoint to one event. An account may hold only one webhook per event, and the endpoint must resolve to a public address.

POST
/webhooks/

Authorization

ApiKey
AuthorizationBearer <token>

API key issued to the partner, sent with the Bearer prefix — for example: Authorization: Bearer sk_live_abc123.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/webhooks/" \  -H "Content-Type: application/json" \  -d '{    "event": "checkout.succeeded",    "endpoint_url": "http://example.com"  }'
{  "id": 12,  "event": "checkout.succeeded",  "endpoint_url": "https://partner.example.com/hooks/suqo",  "is_active": true,  "created_at": "2026-07-03T10:15:00Z"}

List webhooks GET

Every webhook registered by your account.

Retrieve the signing secret GET

Return the account's webhook signing secret, minting it on first read. Every delivery we send is signed with it; use it to verify the signature header on your endpoint. It is not rotatable through this API.