Create webhook endpoint
Create a webhook endpoint. The signing secret is returned only once.
Authorizations
Use a tickward API key from Settings. API keys start with tw_. Store keys as secrets and send them as Authorization: Bearer <key>.
Headers
Optional for POST, PATCH, and DELETE requests. Generate a random UUID with an operation prefix, for example timer-create-${crypto.randomUUID()}. Reuse the same key with the same method, path, query, and JSON body to safely retry one logical write for up to 24 hours. Reusing it with a different request returns 409. The server stores only a hash of the key.
8 - 128^[A-Za-z0-9._:-]+$Body
1 - 80If omitted, the endpoint receives every supported event type.
1 - 11 elementsEvent type delivered to webhook endpoints.
project.created, project.updated, project.deleted, timer.created, timer.updated, timer.archived, timer.restored, timer.deleted, timer.ended, share.created, share.deleted Response
Successful response.
"wh_123"
webhook_endpoint "Production automation"
"https://example.com/tickward/webhooks"
Event type delivered to webhook endpoints.
project.created, project.updated, project.deleted, timer.created, timer.updated, timer.archived, timer.restored, timer.deleted, timer.ended, share.created, share.deleted active, disabled x >= 0ISO 8601 datetime string. Prefer UTC with Z or an explicit offset.
^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}"2026-10-10T09:30:00.000Z"
ISO 8601 datetime string. Prefer UTC with Z or an explicit offset.
^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}"2026-10-10T09:30:00.000Z"
"2026-10-10T09:30:00.000Z"
"2026-10-10T09:30:00.000Z"
"2026-10-10T09:30:00.000Z"
Shown only once. Store it and use it to verify tickward-signature.
"whsec_example"