> ## Documentation Index > Fetch the complete documentation index at: https://unif.dev/llms.txt > Use this file to discover all available pages before exploring further. # Create a webhook endpoint > The `secret` is returned once, at creation. Store it — you need it to verify the `Unif-Signature` header on every delivery. ## OpenAPI ````yaml /api-reference/openapi.yaml post /webhooks openapi: 3.1.0 info: title: Unif API version: '2026-09-01' summary: One schema for commerce data across every channel. description: > The Unif API returns normalized commerce data — shops, products, creators, videos, livestreams and categories — through a single schema that does not change when the underlying data source does. Each request runs a cascade across the sources behind a channel, in cost order, stopping at the first result that verifies. You are charged for the hit, not for the attempts. See [the waterfall](/docs/concepts/waterfall). Every response is denominated in the currency you ask for, scoped to a market, and measured over a period you control, whichever source answered. **Base URL** ``` https://api.unif.dev/v1 ``` All requests require a bearer token. See [Authentication](/docs/authentication). **Conventions** - Success and failure are carried by the HTTP status code. There is no envelope to unwrap: a `200` body is the object itself, and any `4xx` or `5xx` body is an [error object](/docs/platform/errors). - Lists are cursor-paginated. Read `next_cursor` and stop when `has_more` is false. - Every response carries `X-Request-Id`. Billable responses also carry `X-Unif-Credits-Charged` and `X-Unif-Credits-Remaining`. - Monetary fields are converted to the `currency` you request, and every object repeats the `currency` and `period` it was measured under. contact: name: Unif Support email: support@unif.dev url: https://unif.dev/docs license: name: Proprietary url: https://unif.dev/legal/terms servers: - url: https://api.unif.dev/v1 description: Production security: - bearerAuth: [] tags: - name: Meta description: Workspace, channel availability and field coverage. - name: Shops description: Storefronts and sellers. - name: Products description: Listings, pricing and sales performance. - name: Creators description: Affiliates and influencers who sell. - name: Videos description: Short-form video attributed to sales. - name: Livestreams description: Live selling sessions. - name: Categories description: The normalized category tree and category-level market data. - name: Resolution description: Turn a URL, handle or external ID into a Unif entity. - name: Jobs description: Asynchronous work for large searches, enrichments and exports. - name: Lists description: Saved sets of entities. - name: Trackers description: Scheduled re-checks that emit webhook events on change. - name: Webhooks description: Endpoint registration and delivery settings. - name: Usage description: Credit balance and per-request consumption. paths: /webhooks: post: tags: - Webhooks summary: Create a webhook endpoint description: > The `secret` is returned once, at creation. Store it — you need it to verify the `Unif-Signature` header on every delivery. operationId: createWebhook requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/WebhookCreateRequest' examples: jobsAndTrackers: summary: Subscribe to job and tracker events value: url: https://hooks.example.com/unif events: - job.completed - job.failed - tracker.triggered description: Production ingestion responses: '201': description: The created endpoint, including its signing secret. content: application/json: schema: $ref: '#/components/schemas/WebhookWithSecret' '400': $ref: '#/components/responses/BadRequest' components: schemas: WebhookCreateRequest: type: object required: - url - events properties: url: type: string format: uri description: Must be HTTPS. events: type: array minItems: 1 items: $ref: '#/components/schemas/WebhookEventType' description: type: string WebhookWithSecret: allOf: - $ref: '#/components/schemas/Webhook' - type: object properties: secret: type: string description: >- Returned only at creation. Used to verify the `Unif-Signature` header. examples: - whsec_7f3c1a9e4b2d8065f1a3c7e9b5d2408f WebhookEventType: type: string enum: - job.completed - job.failed - tracker.triggered - entity.refreshed Webhook: type: object properties: id: type: string examples: - whk_01k3m9x7v2q8r4t6y0b1n5d7fa object: type: string const: webhook url: type: string format: uri events: type: array items: $ref: '#/components/schemas/WebhookEventType' enabled: type: boolean description: type: - string - 'null' created_at: type: string format: date-time ErrorResponse: type: object required: - error properties: error: $ref: '#/components/schemas/Error' Error: type: object properties: type: type: string enum: - invalid_request_error - authentication_error - permission_error - not_found_error - rate_limit_error - billing_error - coverage_error - api_error code: type: string examples: - parameter_invalid message: type: string param: type: - string - 'null' description: The offending field as a dot-path.: null doc_url: type: string format: uri request_id: type: string responses: BadRequest: description: The request was malformed or a parameter was invalid. headers: X-Request-Id: $ref: '#/components/headers/RequestId' content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: type: invalid_request_error code: parameter_invalid message: filters.revenue.gte must be a non-negative number. param: filters.revenue.gte doc_url: https://unif.dev/docs/platform/errors#parameter_invalid request_id: req_01k3m9x7v2q8r4t6y0b1n5d7fa headers: RequestId: description: Unique ID for this request. Include it in support conversations. schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer description: > Send your workspace API key as a bearer token: ``` Authorization: Bearer unif_sk_live_... ``` Keys are scoped to a single workspace. See [Authentication](/docs/authentication). ````