.png?fit=max&auto=format&n=PYj-p9lRwfHX4QQS&q=85&s=967f00940a17d1d8cc11bd8995dc98d0)
.png?fit=max&auto=format&n=PYj-p9lRwfHX4QQS&q=85&s=5072033d90dfd5e7cc9349712ea4e145)
Create a Webhook
curl --request POST \
--url https://api.example.com/v1/webhooksimport requests
url = "https://api.example.com/v1/webhooks"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/v1/webhooks', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/v1/webhooks",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/v1/webhooks"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/v1/webhooks")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/v1/webhooks")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_bodyWebhook
Create a Webhook
Register an HTTPS endpoint to receive real-time event deliveries.
POST
/
v1
/
webhooks
Create a Webhook
curl --request POST \
--url https://api.example.com/v1/webhooksimport requests
url = "https://api.example.com/v1/webhooks"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/v1/webhooks', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/v1/webhooks",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/v1/webhooks"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/v1/webhooks")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/v1/webhooks")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_bodyCreate a Webhook
Registers an HTTPS endpoint to receive event deliveries. The signing secret is returned once in the response — store it securely to verify theX-Reached-Signature header on incoming deliveries.
Request
POST /v1/webhooks
Body Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
name | string | Yes | Human-readable label for this webhook |
url | string | Yes | HTTPS endpoint to deliver events to |
events | array | No | Event types to subscribe to. Defaults to ["call.completed", "transcript.ready"] |
Available Events
| Event | Description |
|---|---|
call.completed | Fired when a call ends and its log is finalized |
transcript.ready | Fired when transcription and AI summary are both complete. The payload includes a truncated transcript and the full summary |
When you receive a
transcript.ready event, the call log already has both the transcript and summary fields populated. You can fetch the full call log via GET /v1/call-logs/:id to retrieve the complete transcript and summary.Example
curl -X POST \
"https://kdjmltmhxvvmiuehafgl.supabase.co/functions/v1/api-gateway/v1/webhooks" \
-H "Authorization: Bearer rchd_live_xxxxxxxxxxxx" \
-H "Content-Type: application/json" \
-d '{
"name": "Data pipeline",
"url": "https://api.yourcompany.com/reached/webhook",
"events": ["call.completed", "transcript.ready"]
}'
const response = await fetch(
"https://kdjmltmhxvvmiuehafgl.supabase.co/functions/v1/api-gateway/v1/webhooks",
{
method: "POST",
headers: {
"Authorization": "Bearer rchd_live_xxxxxxxxxxxx",
"Content-Type": "application/json"
},
body: JSON.stringify({
name: "Data pipeline",
url: "https://api.yourcompany.com/reached/webhook",
events: ["call.completed", "transcript.ready"]
})
}
);
const { data } = await response.json();
// Store data.secret securely — it is only returned once
Response
{
"data": {
"id": "wh-uuid-1",
"name": "Data pipeline",
"url": "https://api.yourcompany.com/reached/webhook",
"events": ["call.completed", "transcript.ready"],
"is_active": true,
"secret": "whsec_xxxxxxxxxxxx",
"created_at": "2026-07-18T15:00:00.000Z",
"updated_at": "2026-07-18T15:00:00.000Z"
}
}
Response Fields
| Field | Type | Description |
|---|---|---|
id | uuid | Webhook unique identifier |
name | string | Human-readable label |
url | string | HTTPS endpoint URL |
events | array | Subscribed event types |
is_active | boolean | Whether the webhook is active |
secret | string | Signing secret for HMAC verification (returned only once — store it securely) |
created_at | datetime | Creation timestamp |
updated_at | datetime | Last update timestamp |
Verifying Webhook Signatures
Each delivery includes anX-Reached-Signature header containing an HMAC-SHA256 hash of the request body, computed using your webhook’s signing secret. Verify it before processing the payload:
const crypto = require("crypto");
const expected = crypto
.createHmac("sha256", webhookSecret)
.update(rawRequestBody)
.digest("hex");
if (expected !== request.headers["x-reached-signature"]) {
return res.status(401).send("Invalid signature");
}