Managing Endpoints

Create, update, test, and delete registered webhook endpoints, inspect the account-wide delivery log, resend failures, and rotate your signing secret

Registered endpoints are account-level webhook destinations: each one has a URL, an optional event filter, and its own whsec_… signing secret. Everything on this page can also be done from the dashboard under Account → Webhooks.

All endpoints require your API key in the X-API-Key header.

• Up to 10 registered endpoints per account.
• An empty (or omitted) events filter subscribes to all events — see the event taxonomy.
• URLs: HTTPS strongly recommended (http allowed), max 2048 characters, private/internal addresses rejected.

Manage endpoints

Create a registered endpoint.

Request Body

{
  "url": "https://your-app.com/hooks/anakin",
  "description": "Production receiver",
  "events": ["job.completed", "job.failed"]
}

Response

{
  "id": "9b1c22e4-…",
  "url": "https://your-app.com/hooks/anakin",
  "description": "Production receiver",
  "events": ["job.completed", "job.failed"],
  "isActive": true,
  "secret": "whsec_…",
  "createdAt": "2026-07-13T10:00:00Z"
}

The response includes the endpoint's signing secret (whsec_…) — copy it into your receiver to verify deliveries. Creating an endpoint beyond the limit of 10, or with an invalid URL, returns 400.

List your registered endpoints.

{
  "endpoints": [
    {
      "id": "9b1c22e4-…",
      "url": "https://your-app.com/hooks/anakin",
      "description": "Production receiver",
      "events": ["job.completed", "job.failed"],
      "isActive": true,
      "createdAt": "2026-07-13T10:00:00Z"
    }
  ]
}

Update an endpoint. All fields are optional — only the fields you send change.

Request Body

{
  "events": ["job.completed", "job.failed", "monitor.change"],
  "isActive": true
}

Response

Returns the updated endpoint. A missing or non-owned endpoint returns 404.

Delete an endpoint. Deliveries to it stop immediately.

{ "success": true }

Send a webhook.test event to the endpoint so you can verify reachability and signature handling before real traffic — same as the dashboard's Test button.

{
  "deliveryId": "d_7c0f31…",
  "httpStatus": 200,
  "success": true
}

httpStatus is the status your endpoint returned.

Delivery log

Every delivery attempt — to registered endpoints, to per-request webhook_urls, and for monitor alerts — is recorded in one account-wide log, retained for 30 days.

List recent deliveries across your account, newest first.

Query Parameters

Response

{
  "deliveries": [
    {
      "id": "d_7c0f31…",
      "endpointId": "9b1c22e4-…",
      "event": "job.completed",
      "jobId": "job_abc123xyz",
      "url": "https://your-app.com/hooks/anakin",
      "status": "success",
      "httpStatus": 200,
      "attempts": 1,
      "createdAt": "2026-07-13T10:00:06Z"
    }
  ]
}

Same response shape, scoped to one registered endpoint.

Re-send a failed or exhausted delivery. The body and signature are byte-identical to the original (only X-Anakin-Timestamp is fresh), and X-Anakin-Delivery-Id is unchanged — so your de-duplication keeps working. Also available from the dashboard.

{ "success": true }

Signing secret

Your account's default signing secret signs per-request webhook_url deliveries. (Registered endpoints each have their own secret, returned at creation.)

{ "secret": "whsec_…" }

Generate a new default signing secret. Subsequent per-request deliveries are signed with the new secret — update your receiver with the returned value immediately.

{ "secret": "whsec_…" }

Event list

The machine-readable event taxonomy — useful for building event pickers.

{
  "events": [
    "job.completed",
    "job.failed",
    "batch.completed",
    "batch.failed",
    "wire.job.completed",
    "wire.job.failed",
    "monitor.change",
    "ai.search.completed",
    "ai.search.failed",
    "webhook.test"
  ]
}

Code Examples

# Create an endpoint (the response includes its whsec_… secret)
curl -X POST https://api.anakin.io/v1/webhooks \
  -H "X-API-Key: your_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-app.com/hooks/anakin",
    "description": "Production receiver",
    "events": ["job.completed", "job.failed"]
  }'

# Fire a test delivery
curl -X POST https://api.anakin.io/v1/webhooks/9b1c22e4-.../test -H "X-API-Key: your_api_key"

# Inspect recent failures
curl "https://api.anakin.io/v1/webhooks/deliveries?status=failed&limit=20" -H "X-API-Key: your_api_key"

# Resend one
curl -X POST https://api.anakin.io/v1/webhooks/deliveries/d_7c0f31.../resend -H "X-API-Key: your_api_key"

# Rotate the default signing secret (per-request webhook_url deliveries)
curl -X POST https://api.anakin.io/v1/webhooks/signing-secret/rotate -H "X-API-Key: your_api_key"

import requests

headers = {"X-API-Key": "your_api_key"}
base = "https://api.anakin.io/v1/webhooks"

# Create an endpoint
endpoint = requests.post(base, headers=headers, json={
    "url": "https://your-app.com/hooks/anakin",
    "description": "Production receiver",
    "events": ["job.completed", "job.failed"],
}).json()
print(endpoint["id"], endpoint["secret"])  # store the whsec_… secret

# Fire a test delivery
print(requests.post(f"{base}/{endpoint['id']}/test", headers=headers).json())

# Resend anything that failed
deliveries = requests.get(f"{base}/deliveries", headers=headers,
                          params={"status": "failed", "limit": 20}).json()["deliveries"]
for d in deliveries:
    requests.post(f"{base}/deliveries/{d['id']}/resend", headers=headers)

const headers = { 'X-API-Key': 'your_api_key', 'Content-Type': 'application/json' };
const base = 'https://api.anakin.io/v1/webhooks';

// Create an endpoint
const endpoint = await fetch(base, {
  method: 'POST',
  headers,
  body: JSON.stringify({
    url: 'https://your-app.com/hooks/anakin',
    description: 'Production receiver',
    events: ['job.completed', 'job.failed']
  })
}).then(r => r.json());
console.log(endpoint.id, endpoint.secret); // store the whsec_… secret

// Fire a test delivery
const test = await fetch(`${base}/${endpoint.id}/test`, { method: 'POST', headers }).then(r => r.json());
console.log(test.httpStatus, test.success);

// Resend anything that failed
const { deliveries } = await fetch(`${base}/deliveries?status=failed&limit=20`, { headers }).then(r => r.json());
for (const d of deliveries) {
  await fetch(`${base}/deliveries/${d.id}/resend`, { method: 'POST', headers });
}