Docs
Get an API key
Hotel webhooks

Rotate the signing secret

POST
/v1/hotel/webhook-subscriptions/{id}/rotate-secret

You receive a new signing secret, only in this response. For 24 hours new requests carry a signature for each secret; keep accepting your previous secret for at least 2 hours 15 minutes, because requests queued before the rotation carry only its signature. Rotating again replaces the previous secret.

Authorization

x-api-key<token>

Your API key. Issued and revoked from the TrustPixel dashboard; the gateway resolves it to an owning organization on every request.

In: header

Path Parameters

id*string
Match^whs_[a-zA-Z0-9-]+$
Lengthlength <= 128

Header Parameters

x-request-id?string

Correlation id echoed to the upstream service and returned on the response. Generated as req_<uuid> when omitted.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/hotel/webhook-subscriptions/string/rotate-secret"
{  "data": {    "id": "string",    "url": "string",    "event_types": [      "hotel.booking.confirmed"    ],    "status": "ACTIVE",    "previous_secret_expires_at": "2019-08-24T14:15:22Z",    "created_at": "2019-08-24T14:15:22Z",    "updated_at": "2019-08-24T14:15:22Z",    "signing_secret": "string"  }}

Delete a subscription DELETE

You delete the subscription and its delivery history. Requests already queued can still arrive.

List a subscription's deliveries GET

You receive the subscription's deliveries, newest first, each with its event and your endpoint's responses for the current replay. Filter by status to find failed or stuck deliveries.