Remove a form's webhook
Authorization
ApiKeyAuth API key from Settings → API Keys.
In: header
Path Parameters
Response Body
application/json
application/json
application/json
curl -X DELETE "https://example.com/api/v1/forms/string/webhooks/string"{ "ok": true, "id": "cm4whk6pd0001jv04k9d5r2bj"}Add a webhook to a form POST
Registers an endpoint for this form's `form.submitted` event. Up to five per form. The response is the **only** time you see the full `secret`. Store it — you need it to verify the signature on every delivery, and a form provisioned entirely through the API has no other way to obtain it. Deliveries follow the [Standard Webhooks](https://www.standardwebhooks.com/) spec: `webhook-id`, `webhook-timestamp`, and `webhook-signature` (`v1,<base64>`), an HMAC-SHA256 over `{webhook-id}.{webhook-timestamp}.{raw-body}`. `webhook-id` is `evt_form_<submissionId>`, stable across retries — use it to deduplicate. See [Webhooks](/docs/delivery/webhooks) for verification code.
List webhook subscriptions GET
Returns all webhook subscriptions for your team. `failure_count` is the rolling count of consecutive failed delivery attempts. Automette auto-disables a subscription after **10 consecutive failures** — PATCH `enabled: true` to re-arm it and reset the counter.