# Create webhook subscription

**POST /api/v1/webhooks/subscriptions**

Creates a PENDING_VERIFICATION webhook subscription for a public HTTPS callback URL. Each API user may have only one non-deleted subscription for a given targetUrl.


## Servers
- https://api.staging.lumetrade.com: https://api.staging.lumetrade.com ()



## Parameters
### Headers

- **X-API-KEY** (string)
  Public API key issued from the Lumetrade API key management flow.

- **X-API-SECRET** (string)
  API secret paired with the public API key.




### Body: application/json (object)

- **name** (string)
  Optional customer label for the subscription.

- **targetUrl** (string)
  Public HTTPS callback URL. Private, loopback, link-local, metadata, and internal service destinations are rejected.

- **eventTypes** (array)
  Webhook event type.



## Responses
### 201
Webhook subscription created successfully

#### Body: application/json (object)
- **id** (string)
  Public webhook subscription id.

- **name** (string)
  Optional customer label.

- **targetUrl** (string)
  Public HTTPS callback URL.

- **status** (string)
  Subscription status. PENDING_VERIFICATION requires verify before activation. INACTIVE subscriptions receive no new deliveries. DISABLED subscriptions are not customer re-enabled in v1.

- **events** (array[object])
  Customer-facing webhook event catalog entry.

- **verifiedAt** (string(date-time))
  UTC timestamp when the callback endpoint was last verified.

- **createdAt** (string(date-time))
  UTC creation timestamp.

- **updatedAt** (string(date-time))
  UTC last update timestamp.


### 400
Request validation failed

#### Body: application/json (object)
- **code** (integer(int32))

- **message** (string)

- **httpStatus** (integer(int32))

- **requestId** (string)

- **timestamp** (string(date-time))

- **errors** (array[object])


### 403
Authenticated API key is not allowed to perform this action

#### Body: application/json (object)
- **code** (integer(int32))

- **message** (string)

- **httpStatus** (integer(int32))

- **requestId** (string)

- **timestamp** (string(date-time))

- **errors** (array[object])


### 429
Cloudflare API rate limit exceeded

#### Body: application/json (object)
- **error** (string)

- **message** (string)


### 401
API key authentication failed

#### Body: application/json (object)
- **code** (integer(int32))

- **message** (string)

- **httpStatus** (integer(int32))

- **requestId** (string)

- **timestamp** (string(date-time))

- **errors** (array[object])


### 500
Unexpected server error

#### Body: application/json (object)
- **code** (integer(int32))

- **message** (string)

- **httpStatus** (integer(int32))

- **requestId** (string)

- **timestamp** (string(date-time))

- **errors** (array[object])



[Powered by Bump.sh](https://bump.sh)