API reference

GET /api/v1/sources

List sources

Returns a paginated list of webhook sources belonging to the authenticated user.

curl -X GET https://odyhook.dev/api/v1/sources \
  -H "Authorization: Bearer ody_…"

POST /api/v1/sources

Create a source

Creates a new webhook source. A unique ingest slug is generated automatically.

Request body: SourceCreate

curl -X POST https://odyhook.dev/api/v1/sources \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # SourceCreate

GET /api/v1/sources/{id}

Get a source

Retrieves a single source by ID.

curl -X GET https://odyhook.dev/api/v1/sources/{id} \
  -H "Authorization: Bearer ody_…"

PATCH /api/v1/sources/{id}

Update a source

Partially updates a source. Only supplied fields are changed.

Request body: SourceUpdate

curl -X PATCH https://odyhook.dev/api/v1/sources/{id} \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # SourceUpdate

DELETE /api/v1/sources/{id}

Delete a source

Permanently deletes a source. Associated routes and their event history are also removed.

curl -X DELETE https://odyhook.dev/api/v1/sources/{id} \
  -H "Authorization: Bearer ody_…"

GET /api/v1/destinations

List destinations

Returns a paginated list of webhook destinations belonging to the authenticated user.

curl -X GET https://odyhook.dev/api/v1/destinations \
  -H "Authorization: Bearer ody_…"

POST /api/v1/destinations

Create a destination

Creates a new webhook destination. The URL is checked against SSRF protection rules; private/internal IP ranges are rejected.

Request body: DestinationCreate

curl -X POST https://odyhook.dev/api/v1/destinations \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # DestinationCreate

GET /api/v1/destinations/{id}

Get a destination

Retrieves a single destination by ID.

curl -X GET https://odyhook.dev/api/v1/destinations/{id} \
  -H "Authorization: Bearer ody_…"

PATCH /api/v1/destinations/{id}

Update a destination

Partially updates a destination. Only supplied fields are changed. Setting enabled to true also clears the consecutive failure counter.

Request body: DestinationUpdate

curl -X PATCH https://odyhook.dev/api/v1/destinations/{id} \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # DestinationUpdate

DELETE /api/v1/destinations/{id}

Delete a destination

Permanently deletes a destination.

curl -X DELETE https://odyhook.dev/api/v1/destinations/{id} \
  -H "Authorization: Bearer ody_…"

GET /api/v1/routes

List routes

Returns a paginated list of routes belonging to the authenticated user.

curl -X GET https://odyhook.dev/api/v1/routes \
  -H "Authorization: Bearer ody_…"

POST /api/v1/routes

Create a route

Creates a route linking a source to a destination. Both resources must belong to the authenticated user. Returns 409 if a route between this source and destination already exists.

Request body: RouteCreate

curl -X POST https://odyhook.dev/api/v1/routes \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # RouteCreate

GET /api/v1/routes/{id}

Get a route

Retrieves a single route by ID.

curl -X GET https://odyhook.dev/api/v1/routes/{id} \
  -H "Authorization: Bearer ody_…"

PATCH /api/v1/routes/{id}

Update a route

Partially updates a route. Currently only the enabled flag can be toggled.

Request body: RouteUpdate

curl -X PATCH https://odyhook.dev/api/v1/routes/{id} \
  -H "Authorization: Bearer ody_…" \
  -H "Content-Type: application/json" \
  -d '{ … }'  # RouteUpdate

DELETE /api/v1/routes/{id}

Delete a route

Permanently deletes a route.

curl -X DELETE https://odyhook.dev/api/v1/routes/{id} \
  -H "Authorization: Bearer ody_…"

GET /api/v1/events

List events

Returns a paginated list of webhook events received by all sources belonging to the authenticated user, ordered newest first.

curl -X GET https://odyhook.dev/api/v1/events \
  -H "Authorization: Bearer ody_…"

GET /api/v1/events/{id}

Get an event

Retrieves a single event including its raw body and all delivery records.

curl -X GET https://odyhook.dev/api/v1/events/{id} \
  -H "Authorization: Bearer ody_…"

Error

Source

A webhook source — an ingest endpoint Odyhook listens on.

SourceCreate

SourceUpdate

Destination

A downstream URL that Odyhook delivers webhook payloads to.

DestinationCreate

DestinationUpdate

Route

A link between a source and a destination — determines which sources fan out to which destinations.

RouteCreate

RouteUpdate

Event

A webhook event received by an ingest endpoint.

Delivery

A single delivery attempt record for one route on one event.

EventDetail