Webhooks V2

V2 webhook subscriptions (CloudEvents 1.0 — all 5 event types)

List V2 webhook subscriptions for the current company

get

Authorizations

Responses

200

List of V2 webhook subscriptions

idinteger · int64Optional

callbackUrlstringOptional

activebooleanOptional

callbackAuthTypestringOptional

The authentication type configured for this subscription. Credential values are never returned.

Example: BASIC

createdAtstring · date-timeOptional

updatedAtstring · date-timeOptional

401

Unauthorized

get/v2/webhooks

GET /v2/webhooks HTTP/1.1
Host: connect2.tsanet.org
Accept: */*

[
  {
    "id": 1,
    "callbackUrl": "text",
    "eventTypes": [
      "org.tsanet.connect.collaboration-request.created"
    ],
    "active": true,
    "callbackAuthType": "BASIC",
    "createdAt": "2026-01-01T00:00:00.000Z",
    "updatedAt": "2026-01-01T00:00:00.000Z"
  }
]

Register a new V2 webhook subscription (CloudEvents)

post

Subscribe to receive CloudEvents 1.0 structured webhook notifications. Connect 2 will POST event types to your callback URL. Use eventTypes to filter which events you receive. Event type strings must match the CloudEvent type field exactly as it appears in delivered payloads (e.g. org.tsanet.connect.collaboration-request.created). Security: Every delivery is signed with HMAC-SHA256. The signature is sent in the X-Hub-Signature-256 header as sha256=<hex>. Verify it using the secret returned on subscription creation (rotate via POST /v1/webhooks/{id}/secret). Retries: Failed deliveries are retried up to 4 additional times (5 total attempts) with exponential backoff starting at 10s, doubling each attempt, capped at 300s. Messages that exhaust all retries are moved to a dead-letter queue. Contact TSANet support to replay dead-lettered deliveries.

Authorizations

Body

callbackUrlstring · uriRequired

The URL to receive webhook events. Must be accessible via HTTPS in production.

Example: https://api.example.com/webhooks/tsanet

Responses

200

Webhook subscription created successfully

idinteger · int64Optional

callbackUrlstringOptional

activebooleanOptional

secretstringOptional

HMAC secret for signing webhooks (only returned on creation — use POST /v1/webhooks/{id}/secret to rotate)

callbackAuthTypestringOptional

The authentication type configured for this subscription. Credential values are never returned.

Example: BASIC

createdAtstring · date-timeOptional

400

Bad request

401

Unauthorized

post/v2/webhooks

POST /v2/webhooks HTTP/1.1
Host: connect2.tsanet.org
Content-Type: application/json
Accept: */*
Content-Length: 302

{
  "callbackUrl": "https://api.example.com/webhooks/tsanet",
  "eventTypes": [
    "org.tsanet.connect.collaboration-request.created",
    "org.tsanet.connect.collaboration-request.note.created"
  ],
  "callbackAuth": {
    "type": "NONE",
    "username": "text",
    "password": "text",
    "token": "text",
    "headerName": "text",
    "headerValue": "text"
  }
}

{
  "id": 1,
  "callbackUrl": "text",
  "eventTypes": [
    "org.tsanet.connect.collaboration-request.created"
  ],
  "active": true,
  "secret": "text",
  "callbackAuthType": "BASIC",
  "createdAt": "2026-01-01T00:00:00.000Z"
}