Help Screens Developer credentials
Webhook — Deliveries WHK-03
Delivery history, testing and secret rotation.
| Who can use it | webhooks.manage or app owner |
|---|---|
| Where it is | /dev/webhooks/:hookId · link: https://hub.substratalapps.com/dev/webhooks/:hookId or substratal://dev/webhooks/:hookId |
| Available on | Web (PWA), iOS / iPadOS, Android, Windows, Linux (GNOME), macOS |
| Phase | Phase 2 |
What you can do here
- Send test — 202 → new pending row appears on refresh (poll 2 s × 5)
- Rotate secret — confirm (24 h overlap) → KEY-03
- Redeliver — 202 toast; same event_id
- Delete — confirm
Related guides
- Receiving webhooks — Verify Substratal-Signature, handle retries, and react to access.revoked immediately.
On your platform
| App | Status | How it's built |
|---|---|---|
| Web (PWA) | — | Detail pane with header, tablist, toolbar; full page < 768 px |
| iOS / iPadOS | — | Pushed view; segmented Picker; toolbar actions |
| Android | Planned | Detail pane / pushed screen; PrimaryTabRow; top-bar actions |
| Windows | — | Detail pane / drill-in page; SelectorBar tabs; CommandBar actions |
| Linux (GNOME) | — | Content pane; AdwViewSwitcher; header-bar actions |
| macOS | — | Detail column; tabs as segmented Picker in toolbar principal |
Status is reported by each app's repository; — means that app doesn't report it yet.
For developers: API calls
| Method | Path | What it does |
|---|---|---|
| GET | /webhooks/{id} | Fetch one subscription |
| DELETE | /webhooks/{id} | Unsubscribe |
| POST | /webhooks/{id}/rotate-secret | Issue a new signing secret (24-hour overlap) |
| POST | /webhooks/{id}/test | Send a webhook.test event now |
| GET | /webhooks/{id}/deliveries | Recent delivery attempts (30-day log) |
| POST | /webhooks/{id}/deliveries/{deliveryId}/redeliver | Re-send one past event (same event id) |
Every call sends Substratal-Version: 1. Paths are at the host root, with no /v1.