Skip to main content
POST
Create webhook

Delivery body

Mallary sends a JSON body like this:
If you set a webhook secret, Mallary sends X-Mallary-Payload-Signature as sha256=<hex digest>. It is the HMAC-SHA256 signature of the exact signed_payload string. Verify it before parsing or using the event.

Authorizations

Authorization
string
header
required

Use Authorization: Bearer {api_key}

Body

application/json
url
string<uri>
required
events
enum<string>[]

Use '*' to receive all events.

Available options:
*,
post.scheduled,
post.published,
post.failed,
post.partial,
auto_reply.posted
secret
string

Response

Created

id
integer
url
string<uri>
events
enum<string>[]

Use '*' to receive all events.

Available options:
*,
post.scheduled,
post.published,
post.failed,
post.partial,
auto_reply.posted
Last modified on August 9, 2026