| Name | Type | Description | Notes |
|---|---|---|---|
| name | string | Human-readable webhook name. | |
| description | string | Optional free-text note about the webhook purpose. | |
| events | string[] | Event types that trigger a delivery. | |
| status | string | Initial delivery state. Only active webhooks receive events. | [default to 'active'] |
| url | string | HTTPS endpoint that receives POST deliveries, authenticated with the webhook secret as `Authorization: Bearer <secret>`. Must be a public domain name (no IPs or internal hosts). |