Register a webhook endpoint. The signing secret is returned exactly once.
Bearer <token>.Pin a specific API version; defaults to the current version.
Makes the POST retryable: a completed successful response replays for 24 hours (Gleap-Idempotency-Replayed: true). Semantics are at-least-once — a retry that races a crashed or >60s-running original may re-execute. Error responses are never stored; retry them normally.
Event types to deliver; omit for all.
Created
Masked; the full secret is returned once at creation.
Missing, invalid or revoked service account token.
The addressed resource does not exist in this project.
Idempotency-Key reuse with a different request body.
Rate limit exceeded — honor the Retry-After header.
Any other error, including validation_failed (400) and internal_error (500).