Operations Updated Sep 8, 2026

Webhooks API

Register webhook destinations for high-risk RequestGuard assessment events.

Webhooks deliver high-risk assessment notifications asynchronously. They never block the customer-facing assessment response.

Endpoints

POST /webhooks
GET /webhooks
PATCH /webhooks/{id}
DELETE /webhooks/{id}

All webhook endpoints require an active workspace API key and Suite Agency or Lookups Growth, including read, update and delete. Management is unmetered. Delivery checks the current webhook entitlement and pauses after a downgrade removes access. See Authorization.

Create Webhook

{
  "name": "Security alerts",
  "url": "https://example.com/requestguard/webhook",
  "event_types": ["high_risk_assessment"]
}

Delivery

Webhook handlers should return a 2xx status quickly and process heavy work asynchronously. Store the RequestGuard request ID from the payload so the event can be correlated with /events.