Configure where fault open/resolve events get delivered.
List every registered webhook
secret is always redacted (null) in this response - it's only ever shown once, in the POST /webhooks response at creation time. disabled/consecutive_failures/last_error reflect delivery health (see POST /webhooks/{id}/enable) - a webhook that's never had a delivery attempt shows disabled: false, consecutive_failures: 0, last_error: null.
List every registered webhook › Responses
Every webhook, secrets redacted.
idurlsecretUsed to HMAC-SHA256 sign every delivered payload (X-Baler-Signature header, sha256=... format). Send a real string when creating a webhook; always null when read back via GET /webhooks (shown as a real string exactly once, in the POST /webhooks response).
disabledPresent on GET /webhooks list responses only (absent on the POST /webhooks creation response). True once consecutive_failures has hit the auto-disable threshold (5) - see POST /webhooks/{id}/enable.
consecutive_failuresGET-only, see disabled.
last_errorGET-only, see disabled. The most recent delivery error, if any.
filterOmit or null to receive every fault. Currently supports scoping to one rule_id.
Register a webhook subscription
url must be https:// and resolve to a public, non-reserved address - registration-time and every delivery attempt both reject loopback/private/link-local/reserved/multicast targets (e.g. localhost, 127.0.0.1, oxigraph, 10.0.0.0/8), closing the SSRF path against internal infrastructure.
Register a webhook subscription › Request Body
urlsecretUsed to HMAC-SHA256 sign every delivered payload (X-Baler-Signature header, sha256=... format). Send a real string when creating a webhook; always null when read back via GET /webhooks (shown as a real string exactly once, in the POST /webhooks response).
filterOmit or null to receive every fault. Currently supports scoping to one rule_id.
Register a webhook subscription › Responses
Created. The secret is returned here once - every later GET redacts it.
idurlsecretUsed to HMAC-SHA256 sign every delivered payload (X-Baler-Signature header, sha256=... format). Send a real string when creating a webhook; always null when read back via GET /webhooks (shown as a real string exactly once, in the POST /webhooks response).
disabledPresent on GET /webhooks list responses only (absent on the POST /webhooks creation response). True once consecutive_failures has hit the auto-disable threshold (5) - see POST /webhooks/{id}/enable.
consecutive_failuresGET-only, see disabled.
last_errorGET-only, see disabled. The most recent delivery error, if any.
filterOmit or null to receive every fault. Currently supports scoping to one rule_id.
Re-enable a webhook auto-disabled after 5 consecutive delivery failures
There's no scheduled re-enable - a webhook that hit the failure threshold stays disabled until this is called. Clears consecutive_failures back to 0.
path Parameters
idRe-enable a webhook auto-disabled after 5 consecutive delivery failures › Responses
Re-enabled. No response body.