# Webhooks

Manage the endpoints that receive event notifications (`we_`). Dinie
follows the [Standard Webhooks](https://www.standardwebhooks.com/) specification.

Events for each resource are documented in the **Customers**, **Credit
Offers**, and **Loans** sections. This section covers only endpoint management.



## Create a webhook endpoint

 - [POST /webhooks/endpoints](https://dinie.redocly.app/apis/openapi/webhooks/createwebhookendpoint.md): Creates a new webhook endpoint to receive Dinie events. The HMAC
signing secret (secret) is returned only in this response — store it
securely to validate the signatures of received events. Use event patterns
like loan., customer., or * to subscribe to entire categories. Each endpoint
can subscribe to multiple event patterns.

## List webhook endpoints

 - [GET /webhooks/endpoints](https://dinie.redocly.app/apis/openapi/webhooks/listwebhookendpoints.md): Lists all webhook endpoints configured by the partner, including URL,
subscribed events, and status (active/disabled). The signing secret is not
returned in this listing. Use to audit and manage your webhook integrations.

## Retrieve a webhook endpoint

 - [GET /webhooks/endpoints/{webhook_endpoint_id}](https://dinie.redocly.app/apis/openapi/webhooks/getwebhookendpoint.md): Returns the details of a specific webhook endpoint, including URL, list of
subscribed events, and current status (active/disabled). The signing secret (secret)
is not returned — use POST .../secret/rotate if you need to generate a new one.

## Update a webhook endpoint

 - [PATCH /webhooks/endpoints/{webhook_endpoint_id}](https://dinie.redocly.app/apis/openapi/webhooks/updatewebhookendpoint.md): Updates the configuration of a webhook endpoint. Allows changing the destination URL,
the list of subscribed events, the description, and the status (active/disabled). Use
disabled to temporarily pause deliveries without deleting the endpoint. Only
the submitted fields are updated.

## Delete a webhook endpoint

 - [DELETE /webhooks/endpoints/{webhook_endpoint_id}](https://dinie.redocly.app/apis/openapi/webhooks/deletewebhookendpoint.md): Deletes a webhook endpoint. Stops all deliveries.

## Rotate the signing secret

 - [POST /webhooks/endpoints/{webhook_endpoint_id}/secret/rotate](https://dinie.redocly.app/apis/openapi/webhooks/rotatewebhooksecret.md): Rotates the HMAC signing secret of the endpoint. A new secret is generated and
returned in the response. The previous secret remains valid during the grace period
defined by expire_current_in (default: 3600 seconds). During this period,
deliveries include signatures with both secrets, allowing a gradual migration
in your system without losing events.