Webhook Management

Register Webhook

Add an endpoint (up to 5 per store). The signing secret is returned once, in this answer only: store it to verify deliveries.

POST https://rassmi.com/api/v1/webhooks

Authorization

Authorizationheaderrequired

Bearer rsk_…: the store's API key, from API Key in your Rassmi dashboard.

Body

url string required

A public https:// (or http://) address, up to 500 characters.
events array required

Event names, or ["*"] for every event. See Available Events.

Responses

Status	Meaning
`201`	Success. The body is shown on the right.
`422`	Validation failed, or the store already has 5 endpoints.
`401`	Missing, unknown, paused or expired API key.
`429`	More than 60 requests in a minute. See Rate limits.

POST /webhooks

curl -X POST "https://rassmi.com/api/v1/webhooks" \
  -H "Authorization: Bearer $RASSMI_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://example.com/hooks/rassmi",
    "events": [
        "order.created",
        "order.confirmed",
        "order.shipped"
    ]
}'

use Illuminate\Support\Facades\Http;

$response = Http::withToken(env('RASSMI_API_KEY'))
    ->acceptJson()
    ->post('https://rassmi.com/api/v1/webhooks', [
        'url' => 'https://example.com/hooks/rassmi',
        'events' => [
            'order.created',
            'order.confirmed',
            'order.shipped',
        ],
    ]);

$data = $response->json();

const response = await fetch('https://rassmi.com/api/v1/webhooks', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.RASSMI_API_KEY}`,
    Accept: 'application/json',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
      "url": "https://example.com/hooks/rassmi",
      "events": [
          "order.created",
          "order.confirmed",
          "order.shipped"
      ]
  }),
});

const data = await response.json();

import os
import requests

response = requests.request(
    "POST",
    "https://rassmi.com/api/v1/webhooks",
    headers={"Authorization": f"Bearer {os.environ['RASSMI_API_KEY']}"},
    json={
        "url": "https://example.com/hooks/rassmi",
        "events": [
            "order.created",
            "order.confirmed",
            "order.shipped",
        ],
    },
)

data = response.json()

Response · 201

{
    "data": {
        "id": "0199a3d0-7c41-7b2e-a0f9-3d2c1b0a9e88",
        "url": "https://example.com/hooks/rassmi",
        "events": [
            "order.created",
            "order.confirmed",
            "order.shipped"
        ],
        "is_active": true,
        "signing_secret_hint": "whsec_k3Pz...",
        "last_triggered_at": "2026-10-30T09:31:05+00:00",
        "created_at": "2026-10-01T10:00:00+00:00"
    },
    "signing_secret": "k3PzQ8vN2mR7tY1wE5uI9oA4sD6fG0hJ"
}