Skip to main content
POST
/
v1
/
webhooks
/
subscriptions
Create a webhook subscription
curl --request POST \
  --url https://sandbox.api.byzantine.fi/v1/webhooks/subscriptions \
  --header 'Content-Type: application/json' \
  --header 'X-Pubkey: <x-pubkey>' \
  --header 'X-Pubkey, X-Timestamp, X-Signature: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "url": "<string>",
  "enabled": true,
  "eventTypes": [
    "<string>"
  ]
}
'
{
  "subscription": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "integratorId": "550e8400-e29b-41d4-a716-446655440000",
    "url": "<string>",
    "enabled": true,
    "eventTypes": "<unknown>",
    "endpointSafetyMetadata": "<unknown>",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "activeSigningKeyId": "550e8400-e29b-41d4-a716-446655440000"
  },
  "publicKey": "<string>",
  "algorithm": "<string>"
}

Authorizations

​
X-Pubkey, X-Timestamp, X-Signature
string
header
required

Headers

​
X-Pubkey
string
required

Integrator's ECDSA public key (P-256 curve, compressed SEC1 format). Example: 0x038fedef7c12f93bbf342ad8943b7a825a3b41f61c9dc118b2c718efebabbf62fd

​
X-Timestamp
string
required

Unix timestamp in seconds (UTC). Must be within tolerance window (1 minute) to prevent replay attacks. Example: 1760375826

​
X-Signature
string
required

ECDSA signature (DER-encoded, hex with 0x prefix). Signs the message: {timestamp}{METHOD}{path_and_query}{json_body}. Example: 0x3045022100...

Body

application/json
​
url
string
required
​
enabled
boolean
​
eventTypes
string[]

Response

Webhook subscription created

​
subscription
object
required
​
publicKey
string
required
​
algorithm
string
required