Delivery modes
PUSH
Endl sends each event to your HTTPS endpoint as a signed
POST, with retries. You host a receiver. This is the default.PULL
Endl delivers nothing. You poll the event feed and checkpoint a cursor.
Base URL
All webhook endpoints live under
/api/v0.
Quickstart
1
Authenticate
Send
X-API-KEY and X-API-SECRET on every request. See Authentication.2
Create a subscription
Register your receiver URL and the event types you want. The response returns your signing secret once — store it before moving on.
3
Receive and verify
Endl
POSTs each event with an X-WEBHOOK-SIGNATURE header. Verify it before trusting the payload.4
Inspect deliveries
Every attempt is recorded. List them, drill into one, or retry.
Conventions
Your identity comes from your API key, so you only ever see and manage your own resources. Every response is wrapped in the standard envelope. Timestamps are ISO-8601 UTC with three fraction digits —
2026-09-02T12:34:56.789Z.Phase 1. Subscriptions are
PUSH or PULL. SQS and SSE modes are reserved but not yet available; requesting one returns 422.Next steps
Verify signatures
Prove a delivery came from Endl before acting on it.
Manage subscriptions
Create, update, pause, and rotate secrets.
Inspect deliveries
See every attempt, and retry the ones that failed.
Event types
The event catalogue, enums, and limits.